Network Security Engineer

Penn State University; San Diego (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

75% tuition discount

Competitive benefits

Job summary

Penn State University’s Applied Research Laboratory in San Diego seeks a Network Security Engineer to join the JMIE Division. You will design, implement, and secure multi-domain and cloud networks, and develop RMF documentation.

This on-site role requires TS/SCI eligibility, DoD policy familiarity, and mentoring of teammates; periodic local test-site travel is expected. ARL offers tuition benefits and robust security programs.

Qualifications

• Experience producing RMF documentation and guiding systems through accreditation.
• Ability to design and scale secure network architectures across multi‑domain systems.
• Strong cybersecurity background: vulnerability management, scanning, compliance, controls.

Responsibilities

• Design, implement, and maintain network security architectures across multi‑domain and cloud‑connected environments
• Define and enforce cybersecurity and network administration processes for secure data flows
• Collaborate with infrastructure, systems, and cloud teams using Agile methods for secure design and monitoring
• Develop RMF documentation and Body of Evidence artifacts (SSPs, CONOPS) for networked and cloud systems
• Apply security engineering principles to validate system security requirements across network infrastructure
• Conduct network security assessments, threat modeling, and security control validation
• Plan, execute, and report on security assessments across multiple classification domains
• Implement and validate security controls across network architectures and boundary protections
• Coordinate RMF documentation for accreditation of cloud environments and Continuous Monitoring
• Support lifecycle security requirements (patches, supply chain, change control) and mentor teammates
• Higher-level: collaborate with ISSOs/ISSMs to refine RMF documents and A&A packages

Skills

RMF documentation

Secure network design

Vulnerability management

Policy interpretation

Agile collaboration

Education

Bachelor's Degree

Tools

eMASS

ACAS/Nessus

STIG

Job description

POSITION SPECIFICS

Your work location will be fully onsite located in San Diego, CA. Questions about flexible work arrangements may be directed to the hiring manager during the interview process.

Periodic travel to local and remote test sites is required.

We are seeking a highly motivated Network Security Engineer with a strong foundation in security engineering to join the DevSecOps Team of the Joint Mission Integration and Experimentation (JMIE) Division within the Information Advantage Office at the Applied Research Laboratory (ARL) at Penn State, based in San Diego, CA. The JMIE Division delivers advanced communications capabilities and secure experimentation networks supporting departmental mission partners, including cross‑domain data movement, tactical compute environments, and resilient edge processing.

ARL is an authorized DoD SkillBridge partner and welcomes transitioning service members to apply.

You will:

• Design, implement, and maintain network security architectures across multi‑domain and cloud‑connected environments


• Define and enforce cybersecurity and network administration processes, ensuring consistent protection of data flows across experimental and operational networks


• Collaborate across infrastructure, systems, and cloud teams using Agile methods to ensure secure design, verification, deployment, and continuous monitoring of networked environments


• Develop Risk Management Framework (RMF) documentation and Body of Evidence artifacts, including system security plans and concept‑of‑operations documents for networked and cloud systems


• Apply security engineering principles—secure design, secure coding practices, static/dynamic analysis, and architectural review—to validate system security requirements across network infrastructure


• Conduct network security assessments within MLS systems, supporting vulnerability analysis, threat modeling and security control validation


• Plan, execute, and report on security assessments across multiple classification domains


• Implement and validate security controls across network architectures, including boundary protections, segmentation, cross‑domain interfaces, and secure transport mechanisms


• Coordinate and oversee RMF documentation required for accreditation of networked cloud environments, including Cybersecurity Strategy and Continuous Monitoring Plans


• Support lifecycle security requirements such as patch management, supply chain evaluation, change control, and defect management


• Mentor and support team members when needed

Additional responsibilities for higher‑level roles:

• Collaborate closely with ISSOs and ISSMs to refine RMF documentation, review system security plans, risk assessments, accreditation packages, and POA&M's


• Operate independently to develop RMF Authorization & Assessment (A&A) packages and deliver artifacts required to obtain an Authority to Operate (ATO)

Required Skills/Experience areas include:

• Demonstrated experience developing RMF documentation and guiding systems through accreditation across multiple environments


• Proven ability to design and scale secure network architectures across multi‑domain systems


• Strong background in cybersecurity disciplines, including vulnerability management, scanning, compliance evaluation, and control implementation


• Experience interpreting security policy, generating evidence, and documenting test results for NIST 800‑53 / JSIG security controls


• Active TS/SCI clearance (or eligibility to obtain)

Preferred Skills/Experience areas include:

• Experience managing configuration control for security‑related network hardware, software, and firmware


• Prior work as a System or Network Administrator


• Hands‑on experience with Windows and Linux environments, especially in enterprise or tactical networks


• Familiarity with DoD technical and policy documentation


• Experience developing security or RMF training materials


• Proficiency with eMASS, ACAS/Nessus, STIG application, and network hardening


• Certifications such as GRC, CISSP, CISM, CCISO, GIAC, GSLC, or CASP+

MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS

If filled as Cyber Security Engineer (ARL) - Senior Professional, this position requires: Bachelor's Degree 6+ years of relevant experience; or an equivalent combination of education and experience accepted Required Certifications: None If filled as Cyber Security Engineer (ARL) - Advanced Professional, this position requires: Bachelor's Degree 3+ years of relevant experience; or an equivalent combination of education and experience accepted Required Certifications: None

ARL’s purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC).

FOR FURTHER INFORMATION on ARL, visit our web site at www.arl.psu.edu

BACKGROUND CHECKS/CLEARANCES

Employment with the University will require successful completion of background check(s) in accordance with University policies.

Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.

SALARY & BENEFITS

The salary range for this position, including all possible grades, is $100,136.00 - $197,604.00. This salary range includes an adjustment based on required geographic work location.

Salary Structure - Information on Penn State's salary structure

Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page.

CAMPUS SECURITY CRIME STATISTICS

Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.

EEO IS THE LAW

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.

Federal Contractors Labor Law Poster

PA State Labor Law Poster

Penn State Policies

Copyright Information

Hotlines