Senior On-Prem NDR & SIEM Integration Engineer

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a senior VectraAI On Premise Integration Engineer to deploy, tune, and sustain sensors, collectors and pipelines in on‑prem environments. You will focus on network metadata, packet telemetry, routing, and integration with SOC tooling.

The role requires a TS/SCI clearance and experience with NDR plates in data centers, along with Linux operations and secure baselines. You will collaborate with operations to guarantee reliable telemetry ingestion and threat detection.

Qualifications

• Experience with on-premise network engineering or cybersecurity platforms.
• Experience deploying NDR platforms in physical or virtual data centers.
• Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace.
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
• Experience with Linux engineering and system operations.
• Knowledge of TCP/IP, DNS, TLS, HTTP/S, NetFlow or IPFIX, packet capture, and metadata pipelines.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Ability to obtain required DoD 8570 certifications within 30 days of start date.

Responsibilities

• Deploy and sustain on-prem sensors, collectors, and metadata pipelines.
• Integrate with on-prem SIEM, SOAR, or EDR, packet brokers, and analysis tools.
• Engineer sensor placement, including SPANs, taps, and segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG-aligned configurations and secure baselines.
• Build monitoring dashboards, sensor health checks, and tuning workflows.
• Coordinate with operations to ensure reliable telemetry ingestion and threat detection fidelity.

Skills

NDR platforms

Linux engineering

Network engineering

Security clearance

DoD 8570 familiarity

Education

Associate's degree

Bachelor's degree

Master's degree

Tools

Zeek

Suricata

Arkime

Endace

Job description

Booz Allen Hamilton is seeking a senior VectraAI On Premise Integration Engineer to deploy, tune, and sustain sensors, collectors and pipelines in on‑prem environments. You will focus on network metadata, packet telemetry, routing, and integration with SOC tooling.

The role requires a TS/SCI clearance and experience with NDR plates in data centers, along with Linux operations and secure baselines. You will collaborate with operations to guarantee reliable telemetry ingestion and threat detection.