Cyber Range Engineer: Virtual Lab Architect

Booz Allen Hamilton; Colorado; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton seeks a Cyber Range Engineer to build realistic cyberspace environments for national security training. You’ll apply extensive automation to deploy and manage ranges across Linux and Windows, using Ansible, Terraform, and container tech.

You will mentor teammates and work on cutting-edge projects supporting cyber mission forces, including defense-focused virtualization and network configurations. TS/SCI is required.

Qualifications

• 3+ years building IaC solutions with Ansible, Terraform, Puppet.
• Experience with virtualization platforms VMware ESXi, Proxmox, Hyper‑V.
• Admin experience across Linux and Windows (AD/DNS/Exchange).
• Knowledge of networking, VLANs, routing, and DNS services.
• Experience with containerization using Docker.
• Familiarity with SIEM tools (Suricata/Zeek/Elastic) and Python automation.
• Understanding MITRE ATT&CK framework in defense operations.

Responsibilities

• Develop realistic cyberspace environments for training and evaluation.
• Identify vulnerabilities and develop mitigations for cyber missions.
• Mentor and supervise junior team members as needed.
• Apply automation to deploy, manage, and test cyber ranges.

Skills

Infrastructure-as-Code

VMware ESXi

Proxmox

Hyper-V

Linux & Windows admin

AD/DNS/Exchange

Docker containers

SIEM tooling

MITRE ATT&CK

RESTful APIs

Education

Bachelor's degree in CS/CE/EE/Cybersecurity

Tools

Ansible

Terraform

Puppet

Git/GitHub

Proxmox

Docker

Suricata

Zeek

Elastic

Python

Job description

Booz Allen Hamilton seeks a Cyber Range Engineer to build realistic cyberspace environments for national security training. You’ll apply extensive automation to deploy and manage ranges across Linux and Windows, using Ansible, Terraform, and container tech.

You will mentor teammates and work on cutting-edge projects supporting cyber mission forces, including defense-focused virtualization and network configurations. TS/SCI is required.