Staff Engineer, Cybersecurity Platform (R5531)

Shield AI
Dallas, TX
On-site

Who this role is best for

Geared toward senior cybersecurity engineers comfortable with implementing secure network topologies and working on classified systems.

Best fit for

  • Candidates with 5+ years of network engineering experience and a strong grasp of Zero Trust and NIST frameworks
    — “5+ years of experience in platform engineering, cybersecurity or network engineering roles”
  • Individuals who have worked on classified network architectures and can navigate compliance-heavy environments
    — “Experience designing architectures for classified networks”
  • Professionals with hands-on DevSecOps and IaC experience, particularly in Kubernetes and Terraform
    — “Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code)”

Things to consider

  • This role requires obtaining and maintaining a Secret DoD clearance, a time-intensive process
    — “the ability to obtain and maintain a DoD government clearance at the Secret level”
  • The position is likely to be full-time, as temporary employees are not eligible for benefits
    — “Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment)”

How to stand out

  • Emphasize experience with classified network design and ATO documentation in your resume and interview
    — “Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs)”
  • Highlight your hands-on work with enterprise networking hardware and cloud platforms in your profile
    — “Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers)”
  • Showcase your understanding of Zero Trust and compliance frameworks like NIST and ISO in your application materials
    — “Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards)”
  • Demonstrate your ability to work with cross-functional teams on cybersecurity solutions
    — “Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams”
  • Include specific examples of implementing Voice Over IP solutions in your application
    — “Experience implementing Voice Over IP solutions”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · TeamLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • implementing secure network topologies
  • developing documentation for Authorizations to Operate
  • collaborating with cybersecurity teams
Typical background
5+ years of experience in platform engineering, cybersecurity or network engineering rolesBachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field

Skills & requirements

Required

CybersecurityNetwork SecurityCloud NetworkingEnterprise NetworkingNetwork ProtocolsCybersecurity FrameworksStigsThreat DetectionIncident ResponseVoip

Preferred

DevSecOpsKubernetesTerraformClassified NetworksSDNDevOpsIacCompliance Requirements

Stack & domain

CybersecurityNetwork ProtocolsCloud NetworkingEnterprise Networking HardwareVoice Over IPCCIECCNPCisspDefense-tech

About the role

Original posting from Shield AI via Lever

Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI’s technology actively supports operations worldwide. For more information, visit www.shield.ai. Follow Shield AI on LinkedIn, X, Instagram, and YouTube. 

What you'll do::

  • Decompose, allocate and implement cyber security requirements into system architecture. 
  • Enforce network security architecture, ensuring compliance with cybersecurity standards and best practices.  
  • Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs). 
  • Optimize secure network topologies, including segmentation, firewalls, VPNs, and zero-trust models. 
  • Collaborate with cybersecurity engineering to implement STIGs and develop Base Media solutions that enable execution of Plans of Actions and Milestones (POAMs) to mitigate cyber risks. 
  • Collaborate with cybersecurity teams to implement threat detection, mitigation, and incident response strategies. 
  • Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams. 
  • Ensure system scalability, reliability, and performance through proactive design and monitoring strategies  
  • Support troubleshooting and resolution of complex network and infrastructure issues. 
  • Work with Network Engineering teams on implementing Voice Over IP Capabilities. 

Required qualifications::

  • This position requires the ability to obtain and maintain a DoD government clearance at the Secret level 
  • Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field 
  • 5+ years of experience in platform engineering, cybersecurity or network engineering roles  
  • Knowledge of network protocols (TCP/IP, DNS, DHCP, etc.)  
  • Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards)  
  • Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers)  
  • Experience with cloud networking (AWS, Azure, or GCP) and hybrid environments  
  • Experience implementing Voice Over IP solutions. 

Preferred qualifications::

  • Industry certifications such as CCIE, CCNP, CISSP, or equivalent  
  • Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code). 
  • Experience designing architectures for classified networks. 
  • Experience with software-defined networking (SDN) and network automation  
  • Familiarity with DevOps and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible)  
  • Knowledge of compliance requirements (e.g., FedRAMP, DoD, or other regulated environments)  

Full-time regular employee offer package:

Pay within range listed + Bonus + Benefits + Equity

Temporary employee offer package:

Pay within range listed above + temporary benefits package (applicable after 60 days of employment)

Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information.

###

Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know.

Source: Shield AI careers (Lever)

Similar roles