Network Engineer

We are seeking a highly motivated Network Security Engineer with a strong foundation in security engineering to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA. The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross‑domain data movement, tactical compute environments, and resilient edge processing.

ARL is an authorized DoD SkillBridge partner and welcomes transitioning service members to apply.

You will:

• Design, implement, and maintain n etwork security architectures across multi‑domain and cloud‑connected environments
• Define and enforce cybersecurity and network administration processes, ensuring consistent protection of data flows across experimental and operational networks
• Collaborate across infrastructure, systems, and cloud teams using Agile methods to ensure secure design, verification, deployment, and continuous monitoring of networked environments
• Develop Risk Management Framework (RMF) documentation and Body of Evidence artifacts, including system security plans and concept‑of‑operations documents for networked and cloud systems
• Apply security engineering principles—secure design, secure coding practices, static/dynamic analysis, and architectural review—to validate system security requirements across network infrastructure
• Conduct network security assessments within MLS systems, supporting vulnerability analysis, threat modeling and security control validation
• Plan, execute, and report on security assessments across multiple classification domains
• Implement and validate security controls across network architectures, including boundary protections, segmentation, cross‑domain interfaces, and secure transport mechanisms
• Coordinate and oversee RMF documentation required for accreditation of networked cloud environments, including Cybersecurity Strategy and Continuous Monitoring Plans
• Support lifecycle security requirements such as patch management, supply chain evaluation, change control, and defect management
• Mentor and support team members when needed

Additional responsibilities for higher‑level roles:

• Collaborate closely with ISSOs and ISSMs to refine RMF documentation, review system security plans, risk assessments, accreditation packages, and POA&Ms
• Operate independently to develop RMF Authorization & Assessment (A&A) packages and deliver artifacts required to obtain an Authority to Operate (ATO)

Required Skills/Experience areas include:

• Demonstrated experience developing RMF documentation and guiding systems through accreditation across multiple environments
• Proven ability to design and scale secure network architectures across multi‑domain systems
• Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation
• Experience interpreting security policy, generating evidence, and documenting test results for NIST 800‑53 / JSIG security controls
• Active TS/SCI clearance

Preferred Skills/Experience areas include:

• Experience managing configuration control for security‑related network hardware, software, and firmware
• Prior work as a System or Network Administrator
• Hands‑on experience with Windows and Linux environments, especially in enterprise or tactical networks
• Familiarity with DoD technical and policy documentation
• Experience developing security or RMF training materials
• Proficiency with eMASS, ACAS/Nessus, STIG application, and network hardening
• Certifications such as GRC, CISSP, CISM, CCISO, GIAC, GSLC, or CASP+