Information Assurance & Cybersecurity Engineer (Network Hardening & STIGs)

NS4 Inc; Fort Meade, Northern (MD, KY); On-site; USD 90,000 - 125,000; Full time

Job summary

NS4 Inc is seeking an Information Assurance & Cybersecurity Engineer to harden network infrastructure and support security, compliance, and risk management for critical DoD networks. The role emphasizes applying STIGs, establishing secure baselines, and conducting vulnerability assessments across complex telecommunications systems.

You will translate security guidelines into practical configurations, support RMF A&A activities, and implement robust access controls (TACACS+/RADIUS, SSHv2, SNMPv3,

Qualifications

• Hands-on experience configuring and securing network devices.
• Experience applying DISA STIGs and SRGs.
• Strong understanding of DoD cybersecurity requirements.
• Ability translate security guidelines into operational network configs.

Responsibilities

• Apply, validate, and document DISA STIGs and SRGs across routers, switches, firewalls, optical transport, and telecom equipment.
• Establish, maintain, and audit secure baseline configurations for multi-vendor network devices.
• Perform automated and manual vulnerability scans using ACAS (Nessus) and SCC.
• Identify, analyze, and remediate cybersecurity vulnerabilities and configuration drift across network hardware and firmware.
• Develop Plan of Action and Milestones (POA&Ms) for non-compliant controls and track remediation.
• Support RMF Authorization and Assessment processes, compiling BoE artifacts for network controls.
• Configure secure administrative protocols and access controls, including TACACS+, RADIUS, SSHv2, SNMPv3, 802.1X, and RBAC.
• Implement network-level security controls, including control plane policing, banner settings, logging, and disabling unnecessary services.

Skills

Network security

Vulnerability assessment

RMF/A&A processes

Security standards

DoD requirements

Tools

ACAS (Nessus)

SCAP Compliance Checker (SCC)

Job description

We are seeking an Information Assurance & Cybersecurity Engineer specializing in network infrastructure hardening to support the security, compliance, and risk management of critical network and telecommunications systems. The engineer will be responsible for applying Security Technical Implementation Guides (STIGs), implementing baseline security configurations, conducting vulnerability assessments, and maintaining compliance across enterprise and service-provider network equipment. The ideal candidate has hands‑on experience configuring and securing network devices, a deep understanding of DoD cybersecurity requirements, and expertise in translating security guidelines into practical, operational network configurations.

Key Responsibilities

Apply, validate, and document DISA STIGs and Security Requirements Guides (SRGs) across routers, switches, firewalls, optical transport, and telecommunications equipment.

Establish, maintain, and audit secure baseline configurations for multi‑vendor network devices.

Perform automated and manual vulnerability scans using tools like ACAS (Nessus) and SCAP Compliance Checker (SCC).

Identify, analyze, and remediate cybersecurity vulnerabilities and configuration drift across network hardware and firmware.

Develop Plan of Action and Milestones (POA&Ms) for non‑compliant controls and track vulnerability remediation through completion.

Support Risk Management Framework (RMF) Authorization and Assessment (A&A) processes, compiling body of evidence (BoE) artifacts for network controls.

Configure secure administrative protocols and access controls, including TACACS+, RADIUS, SSHv2, SNMPv3, 802.1X, and Role‑Based Access Control (RBAC).

Implement network‑level security controls, including control plane policing, banner settings, logging (Syslog/SIEM integration), disabling unnecessary services, and port