Staff Engineer, Cybersecurity Platform (R5531)

Team: X-BAT Engineering - Software

Location: Dallas, Texas

Commitment: Full Time Employee

Workplace Type: onsite

Job Description:

What you'll do:

Decompose, allocate and implement cyber security requirements into system architecture. 
Enforce network security architecture, ensuring compliance with cybersecurity standards and best practices.
Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs). 
Optimize secure network topologies, including segmentation, firewalls, VPNs, and zero-trust models. 
Collaborate with cybersecurity engineering to implement STIGs and develop Base Media solutions that enable execution of Plans of Actions and Milestones (POAMs) to mitigate cyber risks. 
Collaborate with cybersecurity teams to implement threat detection, mitigation, and incident response strategies. 
Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams. 
Ensure system scalability, reliability, and performance through proactive design and monitoring strategies
Support troubleshooting and resolution of complex network and infrastructure issues. 
Work with Network Engineering teams on implementing Voice Over IP Capabilities. 

Required qualifications:

This position requires the ability to obtain and maintain a DoD government clearance at the Secret level 
Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field 
5+ years of experience in platform engineering, cybersecurity or network engineering roles
Knowledge of network protocols (TCP/IP, DNS, DHCP, etc.)
Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards)
Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers)
Experience with cloud networking (AWS, Azure, or GCP) and hybrid environments
Experience implementing Voice Over IP solutions. 

Preferred qualifications:

Industry certifications such as CCIE, CCNP, CISSP, or equivalent
Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code). 
Experience designing architectures for classified networks. 
Experience with software-defined networking (SDN) and network automation
Familiarity with DevOps and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible)
Knowledge of compliance requirements (e.g., FedRAMP, DoD, or other regulated environments)