Cybersecurity Platform Engineer (R5531)

The ideal candidate will operate in a hands-on manner, serving as a technical expert and a key contributor in decision-making across network and infrastructure domains.

What you'll do:

• Decompose, allocate and implement cyber security requirements into system architecture.
• Enforce network security architecture, ensuring compliance with cybersecurity standards and best practices.
• Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs).
• Optimize secure network topologies, including segmentation, firewalls, VPNs, and zero-trust models.
• Collaborate with cybersecurity engineering to implement STIGs and develop Base Media solutions that enable execution of Plans of Actions and Milestones (POAMs) to mitigate cyber risks.
• Collaborate with cybersecurity teams to implement threat detection, mitigation, and incident response strategies.
• Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams.
• Ensure system scalability, reliability, and performance through proactive design and monitoring strategies
• Support troubleshooting and resolution of complex network and infrastructure issues.
• Work with Network Engineering teams on implementing Voice Over IP Capabilities.

Required qualifications:

• This position requires the ability to obtain and maintain a DoD government clearance at the Secret level
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field
• 5+ years of experience in platform engineering, cybersecurity or network engineering roles
• Knowledge of network protocols (TCP/IP, DNS, DHCP, etc.)
• Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards)
• Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers)
• Experience with cloud networking (AWS, Azure, or GCP) and hybrid environments
• Experience implementing Voice Over IP solutions.

Preferred qualifications:

• Industry certifications such as CCIE, CCNP, CISSP, or equivalent
• Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code).
• Experience designing architectures for classified networks.
• Experience with software-defined networking (SDN) and network automation
• Familiarity with DevOps and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible)
• Knowledge of compliance requirements (e.g., FedRAMP, DoD, or other regulated environments)

#LD

Full-time regular employee offer package:

Pay within range listed + Bonus + Benefits + Equity

Temporary employee offer package:

Pay within range listed above + temporary benefits package (applicable after 60 days of employment)

Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information.

###

Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know.