Job Description

Engineer, Aviation Cybersecurity-Network & Systems

Work Location: Fort Worth, TX (Face To Face Interview )

Candidate should be willing to work onsite 60% (Minimum Tue, Wed, Thu)

Description:

Focus: Network, Systems, Cloud, and PKI Security

Engineer, Network & Systems (ANSP Program)

FOCUS

• Ensure secure aircraft, ground, and communications systems relied upon for our ANSP Program, with concentrated attention towards network, systems, cloud, and PKI security.

SKILLS

• Deep Cybersecurity Expertise: Requires 3-5+ years of progressive cybersecurity engineering experience with deep understanding of network, systems (including Windows and Linux server administration), cloud, and PKI security principles and technologies.

• Hands-on Technical Skills: Proficiency in managing firewalls, VPNs, IDPS, ZTNA, EDR, vulnerability scanning, configuration management tools, and CSPM solutions. Also includes demonstrated experience in Windows and Linux server configuration, hardening, maintenance, and security patching.

• Cloud & PKI Focus: Expertise in cloud security (AWS or Azure) and extensive experience with PKI infrastructure, certificate lifecycle management, and key management are essential.

• Secure Architecture & Vulnerability Management: Ability to design secure network architectures and conduct security assessments to identify and mitigate vulnerabilities, including system-level vulnerabilities on Windows and Linux servers.

• Aviation Security Contribution: Will contribute to critical FAA aircraft network security program duties, including securing communication between aircraft and ground systems, collaborating with OEMs, and ensuring the security and integrity of underlying Windows and Linux server infrastructure.

PREFERRED CERTIFICATIONS

• CISSP (Certified Information Systems Security Professional)

• CCSP (Certified Cloud Security Professional)

• CompTIA Security+

• Cisco CCNA (Cisco Certified Network Associate)

• GIAC Security Essentials (GSEC)

TOOLS AND TECHNOLOGIES

Network Security

• Enterprise-grade Firewalls: (e.g., Cisco Firepower, Palo Alto Networks, Fortinet)

• VPN & ZTNA Technologies: (e.g., RRAS, Tempered Airwall, Cisco AnyConnect, Zscaler, OpenVPN)

• Intrusion Detection/Prevention Systems (IDPS): (e.g., Snort, Suricata, Zeek)

• Monitoring Tools: (e.g., Wireshark)

• Experience with multiple vendors within these categories is beneficial.

System Security (Server & Endpoint)

• Windows & Linux Server Security: Configuration, Hardening, Patching, Microsoft Active Directory and Group Policy

• Endpoint Detection and Response (EDR): (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint)

• Vulnerability Scanning: (e.g., Tenable Nessus, Tanium Comply)

• Configuration Management (for Security Automation): (e.g., Ansible, Puppet, Chef)

Cloud Security (AWS or Azure Focus)

• Cloud Security Posture Management (CSPM): (e.g., AWS Security Hub, Azure Security Center)

• Cloud IAM & Access Control (AWS IAM, Azure AD)

• Cloud Security Services: (AWS & Azure native security offerings)

Public Key Infrastructure (PKI)

• Certificate Authorities (CA): (e.g., Microsoft AD CS, OpenSSL)

• Key Management Systems (KMS): (e.g., Hardware HSMs, AWS KMS, Azure Key Vault, HashiCorp Vault)

Thanks

Govardhan

Your Trusted Digital Technology Partner

Email: [email protected]

Job Tags

Similar Jobs