Staff Cybersecurity Platform Engineer

Shield AI is seeking an experienced Staff Cybersecurity Platform Engineer to design, implement, and optimize complex software and network infrastructures. The ideal candidate will operate in a hands-on manner, serving as a technical expert and a key contributor in decision-making across network and infrastructure domains.

Responsibilities:

• Decompose, allocate, and implement cybersecurity requirements into system architecture.
• Enforce network security architecture, ensuring compliance with cybersecurity standards and best practices.
• Develop documentation for installations and configurations required to obtain Authorizations to Operate (ATOs).
• Optimize secure network topologies, including segmentation, firewalls, VPNs, and zero-trust models.
• Collaborate with cybersecurity engineering to implement STIGs and develop Base Media solutions that enable execution of Plans of Actions and Milestones (POAMs) to mitigate cyber risks.
• Collaborate with cybersecurity teams to implement threat detection, mitigation, and incident response strategies.
• Provide technical insight on X-BAT GCS cybersecurity stack to cross-functional teams.
• Ensure system scalability, reliability, and performance through proactive design and monitoring strategies.
• Support troubleshooting and resolution of complex network and infrastructure issues.
• Work with Network Engineering teams on implementing Voice Over IP Capabilities.

Required qualifications:

• Ability to obtain and maintain a DoD government clearance at the Secret level.
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related IT field.
• 5+ years of experience in platform engineering, cybersecurity, or network engineering roles.
• Knowledge of network protocols (TCP/IP, DNS, DHCP, etc.).
• Strong expertise in cybersecurity frameworks and protocols (Zero Trust, NIST SP 800-53 & 800-63B, ISO 27001, firewalls, IDS/IPS, encryption standards).
• Hands-on experience with enterprise networking hardware (routers, switches, firewalls, load balancers).
• Experience with cloud networking (AWS, Azure, or GCP) and hybrid environments.
• Experience implementing Voice Over IP solutions.

Preferred qualifications:

• Industry certifications such as CCIE, CCNP, CISSP, or equivalent.
• Strong DevSecOps background with hands-on Kubernetes and Terraform.
• Experience designing architectures for classified networks.
• Experience with software-defined networking (SDN) and network automation.
• Familiarity with DevOps and Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible).
• Knowledge of compliance requirements (e.g., FedRAMP, DoD, or other regulated environments).

Additional Information:

• Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity.
• Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment).