Security Architecture and Infrastructure Engineer

Security Architecture and Infrastructure Engineer The Opportunity: Define, enhance, implement, and maintain security solutions across client networks and technology platforms. Develop security solutions aligned to security strategy, advise on technologies, tools, and techniques, communicate complex security concepts to technical and senior audiences, and implement infrastructure and cybersecurity controls. Work may include enhanced detection, vulnerability capabilities, improved event correlation, endpoint security, micro‑segmentation, and security control modernization. Responsibilities Define and enhance security architecture for client networks and technology platforms. Implement and maintain security solutions aligned with the security strategy. Advise stakeholders on security technologies, tools, and approaches. Communicate complex security concepts to technical and senior audiences. Implement infrastructure and cybersecurity controls such as detection, vulnerability management, event correlation, endpoint security, micro‑segmentation, and modernization of security controls. Qualifications 5+ years of experience in security engineering or architecture. 2+ years of experience in infrastructure or enterprise security. Experience with security technologies including Check Point, Cisco, Forescout, DLP, and endpoint security. Experience with big data analytics, big data management, and data privacy. Experience with IAM, DMARC, and Duo Security. Knowledge of security frameworks, policies, and procedures, including CDM regulations and compliance activities. Ability to communicate complex security concepts to varied audiences, including senior management. Secret clearance. Bachelor's degree in CS or Information Assurance. Nice if you have Experience with micro‑segmentation, IBM Tivoli NetCool or Omnibus, and Dell EMC Isilon. Experience with capture‑the‑flag (CTF) or a global security perspective. Experience with hardware asset management (HAM), EDR, and Forescout CounterACT. Experience with BlackBerry Enterprise Server, Cisco IronPort Email Security, and Cisco switch configuration. Knowledge of computer crimes, computer devices, and core application systems. Ability to display initiative, teamwork, and excellence in client services. TS/SCI clearance. CCNA Routing, Cisco Configuration Professional, or Cisco Internetworking Certification. Clearance Applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required. Compensation & Benefits The projected compensation range for this position is $86,800.00 to $198,000.00 annualized USD. Benefits include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Full‑time and part‑time employees working at least 20 hours a week are eligible for Booz Allen’s benefit programs. Work Model Remote: If this position is listed as remote, there may still be occasions where you are required to work in person. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently and may also be required to visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility. Commitment to Non‑Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Booz Allen Hamilton