Senior On-Prem NDR & VectraAI Integration Engineer

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Senior VectraAI On Premise Integration Engineer to deploy, tune, and sustain sensors and pipelines in enterprise on‑prem environments. The role centers on network metadata, packet telemetry, and integration with SOC tooling.

The candidate will engineer sensor placement, manage routing and metadata pipelines, and align configurations with STIG baselines. A TS/SCI clearance and DoD‑class certifications are required within 30 days of start date.

Qualifications

• Active TS/SCI clearance; willing to take a polygraph exam.
• 10+ years of IT/support experience with DoD-style environments preferred.
• DoD 8570 IAT Level III Certification such as Security+ or higher within 30 days of start date.
• DoD 8570 CSSP-IS Certification within 30 days of start date.
• Experience with on‑premise network engineering or cybersecurity platforms.

Responsibilities

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on‑premise networks.
• Integrate VectraAI with on‑premise SIEM, SOAR, or EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement, including SPANs and taps.
• Manage routing, VLANs, and metadata transformation.
• Build monitoring dashboards and sensor health checks.
• Coordinate with operations to ensure reliable on‑prem telemetry ingestion and threat detection fidelity.

Skills

Network engineering

Cybersecurity platforms

NDR deployment

Packet analytics

Linux engineering

TCP/IP/DNS/TLS

Security clearance TS/SCI

Education

Associate’s degree + 10+ years

Bachelor’s degree + 8+ years

Master’s degree + 6+ years

Tools

Zeek

Suricata

Arkime

Endace

Job description

Booz Allen Hamilton is seeking a Senior VectraAI On Premise Integration Engineer to deploy, tune, and sustain sensors and pipelines in enterprise on‑prem environments. The role centers on network metadata, packet telemetry, and integration with SOC tooling.

The candidate will engineer sensor placement, manage routing and metadata pipelines, and align configurations with STIG baselines. A TS/SCI clearance and DoD‑class certifications are required within 30 days of start date.