CyberSecurity Engineer III
$150,000–$180,000 year
On-siteSan Diego, California, United States
Job Summary
Design and administer secure Secret and Top Secret infrastructure stacks across on-premises and private cloud environments, including large-scale VMware ESXi/vSAN virtualization platforms. Deploy, configure, and maintain RHEL and Windows Server systems while implementing security controls per NIST SP 800-53 and DISA STIGs. Automate system builds, patching, and hardening using Ansible, Jenkins, and PDQ, then track vulnerabilities with ACAS, Nessus, and Splunk to reduce attack surfaces. Troubleshoot complex LAN/WAN routing issues involving OSPF and BGP, support accreditation efforts including ATO packages and security audits, and collaborate with engineering and mission teams to resolve technical challenges. Requires TS clearance with SCI eligibility and US citizenship. Located in San Diego, CA, with a flexible/hybrid schedule and up to 10% travel.
Required Qualifications
- Five or more years of experience in infrastructure engineering, systems administration, network engineering, or a closely related technical field.
- Experience administering VMware ESXi and vSAN virtualization environments.
- Experience deploying, configuring, administering, and maintaining RHEL and Windows Server environments.
- Experience supporting infrastructure automation using Ansible, Terraform, or related automation and Infrastructure as Code technologies.
- Experience implementing or remediating security controls in accordance with DISA STIGs and NIST SP 800-53 requirements.
- Strong understanding of on-premises cloud architectures, enterprise virtualization, and secure data center operations.
- Experience identifying, tracking, and remediating vulnerability backlogs in classified, regulated, or compliance-driven environments.
- Experience supporting Department of Defense, Intelligence Community, government mission systems, or similarly regulated environments.
- Ability to work effectively with infrastructure, networking, cybersecurity, software, and mission stakeholders in a classified environment.
- US Citizenship required
- No dual citizenship
- Active TS w/ SCI eligibility and obtain maintain SCI
- Option for Flexible/Hybrid Schedule
- Travel estimated at 10%
- CONUS travel for customer engagement, technical coordination, system support, or mission requirements
- Work in a government facility may be required
- Travel may be required for customer engagement, team coordination, and potentially for business development
Desired Qualifications
- Prior experience supporting the Intelligence Community or national-level organizations.
- Experience supporting LAN/WAN environments, routing, switching, OSPF, or BGP.
- Experience with ACAS, Splunk, Nessus, Veeam, Horizon, Dell Wyse, or related enterprise infrastructure technologies.
- Experience serving as a technical lead, mentoring junior engineers, or coordinating technical work across multiple teams.
- Familiarity with DevSecOps workflows and tools in classified or restricted environments.
- Experience supporting ATO packages, security control assessments, compliance documentation, or cybersecurity audits.
- Experience with Jenkins, PDQ, WSUS, Active Directory, Atlassian Suite, YUM repositories, databases, or enterprise monitoring platforms.
- Bachelor's or master's degree in a STEM field.
- CompTIA Security+ certification or obtain within 12 months from hire.
- CompTIA Network+ certification or obtain within 12 months from hire.
- ITIL Foundation certification.
- Additional DoD 8570 or DoD 8140 certifications are a plus.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.