Cybersecurity Engineer - Inside Plant

Socket.dev; Tamuning (GU); On-site; USD 90,000 - 130,000; Full time

Job summary

GTA (Teleguam Holdings LLC dba GTA) is seeking a Cybersecurity Engineer to secure our inside plant OT/IT environment, including CVE management, segmentation, and policy hardening. You will work with network engineering, IT security, and operations to maintain carrier-grade security without impacting availability.

The role emphasizes vulnerability hunting, incident response, and secure configurations for Proxmox/VMware and SAN storage, with regulatory compliance oversight for telecom networks on

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 3+ years of cybersecurity or network security experience, ideally in telecom OT or industrial networks.
• Knowledge of network segmentation, firewalls, and access control for OT/IT hybrid environments.
• Experience with vulnerability assessment and patch/remediation in uptime-critical environments.
• Familiarity with virtualization and storage security (VMware/Proxmox, SAN) and Linux/Windows hardening.
• Understanding telecom network elements (switching, transmission, EMS/NMS) for risk assessment.
• Experience with security monitoring tools (SIEM, IDS/IPS, endpoint protection) and IR processes.
• Strong cross-team communication; ability to work with engineers and security groups.
• Background check and drug screening clearance.

Responsibilities

• Assess and harden security posture of inside plant network equipment and IT systems.
• Perform vulnerability assessments and coordinate remediation while balancing uptime.
• Design and maintain network segmentation, access controls, and firewall/ACL policies.
• Monitor security events and respond to incidents affecting ISP infrastructure.
• Manage privileged access to EMS/NMS, virtualization, and storage infrastructure.
• Collaborate on enterprise security tooling and OT-specific policy adaptations.
• Support secure configuration and hardening of Proxmox/VMware virtualization hosts and SAN.
• Participate in incident response and coordinate with leadership on security matters.
• Ensure compliance with CPNI, FCC, and other regulatory requirements.

Skills

OT security

Network security

Vulnerability scanning

CISSP

GICSP

Security+

CPNI/FCC regulations

Proxmox

VMware

Veeam

Python

Bash

PowerShell

Education

Bachelor's degree in Cybersecurity, Computer Science, IT or related field

Tools

Proxmox

VMware

Veeam

Linux servers

Windows servers

EMS/NMS platforms

SAN storage security

Job description

Who we are looking for:

GTA is seeking a Cybersecurity Engineerto secure the technology environment supporting our central office and facility-based network infrastructure. This role spans both operational technology (OT) — switching, transmission, and network element equipment — and the IT systems that manage and connect to it, including EMS/NMS platforms, OSS tools, servers, and virtualized infrastructure (VM hosts and SANs) within central offices and equipment facilities. You'll work within the Inside Plant organization to assess, harden, monitor, and remediate security risk across this mixed OT/IT environment, partnering with network engineering, systems administration, and corporate IT Security to ensure ISP infrastructure meets carrier-grade security standards without compromising network availability. The ideal candidate pairs deep security judgment with a real respect for the operational realities of a live telecom network.

Here is what the role looks like:
As a Cybersecurity Engineer at GTA, you'll be the security conscience of our inside plant — hunting vulnerabilities, designing defenses, and responding when it matters most. You'll segment and isolate critical network systems, harden the virtualization and storage layers beneath them, and guide the engineers and technicians around you toward more secure practices. If you're energized by high-stakes infrastructure and want your security work to protect an entire island's connection, this is your chance to make a real impact. Essential job functions include:

• Assess and harden the security posture of inside plant network equipment (switching, transmission) and the IT systems that manage them (EMS/NMS, OSS platforms, servers, VM hosts, SANs) within central offices and equipment facilities
• Perform vulnerability assessments and coordinate remediation/patching for ISP network equipment and supporting IT systems, balancing security requirements against network availability and change-control constraints
• Design and maintain network segmentation, access controls, and firewall/ACL policies isolating OT network elements from general IT/corporate networks
• Monitor central office network and IT systems for security events, anomalies, and unauthorized access; investigate and respond to incidents affecting ISP infrastructure
• Manage and audit privileged access to network element management systems, EMS/NMS platforms, and virtualization/storage infrastructure supporting ISP operations
• Partner with corporate IT Security on enterprise security tooling (SIEM, endpoint protection, vulnerability scanning) extended into the ISP environment, adapting policies for OT-specific constraints
• Support secure configuration and hardening standards for Proxmox/VMware virtualization hosts, SAN storage, and Linux/Windows servers supporting network element functions
• Participate in incident response for security events affecting network equipment or ISP-supporting IT systems, including coordination with the Director, Network Operations — Inside Plant and corporate IT Security
• Support compliance efforts related to CPNI, FCC, and other regulatory security requirements as they apply to network infrastructure
• Conduct security reviews of new equipment, software, and vendor solutions prior to deployment within central office environments
• Maintain documentation of security architecture, access controls, and risk assessments specific to inside plant systems
• Provide security guidance and training to ISP technicians and engineers on secure operating practices for network equipment and supporting systems
• On-call availability required for security incidents affecting network equipment or ISP-supporting systems
  
• Performs other related duties and special projects assigned to support evolving business priorities
  

Preferred Qualifications:

• Direct experience securing OT or network element environments in a telecom, utility, or critical infrastructure setting
• Certifications such as CISSP, GICSP, Security+, or equivalent OT/IT security credentials
• Familiarity with CPNI, FCC, or other telecom-specific regulatory security requirements
• Experience with Proxmox, VMware, and Veeam-based infrastructure security considerations
• Scripting/automation ability (Python, Bash, PowerShell) for security tooling and assessments
  

Here’s what you need to have:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; equivalent work experience will be considered.
• 3+ years of experience in cybersecurity or network security roles, ideally including exposure to telecom, OT, or industrial network environments
• Working knowledge of network segmentation, firewalls, and access control design in environments combining OT and IT systems
• Experience with vulnerability assessment and patch/remediation coordination in environments where uptime is critical
• Familiarity with virtualization and storage security (VMware and/or Proxmox, SAN environments) and Linux/Windows server hardening
• Understanding of telecom network element concepts (switching, transmission, EMS/NMS) sufficient to assess associated security risk
• Experience with security monitoring tools (SIEM, IDS/IPS, endpoint protection) and incident response processes
• Strong communication skills to work across network engineering, systems administration, and corporate IT Security teams
  
• Must successfully pass a background check and drug screening

Still Interested? Apply today!

GTA Val-You’s:

Our Customers Matter. Build Trust Through Respect. Be Accountable. Learning is Growth. Lead with Care. Win Together.Be a Game Changer.

Teleguam Holdings LLC dba GTA is an Equal Opportunity Employer

Teleguam Holdings LLC, dba GTA is an Equal Opportunityemployer dedicated to building an inclusive and diverse workforce as we see this is critical to the success of our company. Having diverse perspectives, experiences, and skills within our teams allows us to learn from each other and grow as individuals, which leads to better work and outcomes. Through our actions, our goal is to create long term impactful change throughout the company and our island community.However you identify or whatever background you come from,we welcome you to be a part of this change. We ask that you apply to a role that excites you and where you can bring your authentic, best self to work. Keep in mind that all aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs, without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Read more about our commitment to these principles in the Department of Labor's EEO notices and Guam Department of Labor notices.

Other applicable federal employment laws include Family Medical Leave Act (FMLA) and UniformServices employment and Reemployment Act (USERRA).

Accommodations for Applicants with Disabilities

Teleguam Holdings LLC, dba GTA has always worked to provide qualified applicants and employees who are disabled veterans or individuals with disabilities with needed reasonable accommodations in accordance with the ADA. If you have difficulty using our online system due to a disability and need an accommodation, please email us at [e-mail] or call us at [phone].