Network & Cybersecurity Engineer (Enterprise, ISSM, and Program Support)

Redwood Strong is seeking a highly versatile Network & Cybersecurity Engineer to support our company’s enterprise IT environment, manage information security for small classified networks, and provide cybersecurity engineering support to customer-funded defense programs. This role requires a hands-on technical expert who can design, secure, and maintain robust multi-site networks; administer Microsoft GCC High cloud environments; manage compliance and accreditation for classified systems; and lead cybersecurity engineering efforts that enable system authorizations for government test and demonstration activities.

Responsibilities

Enterprise Network Architecture & Cybersecurity (Internal Company Operations)The engineer will serve as the technical owner for the company’s enterprise network infrastructure, ensuring security, availability, and scalability.

Key duties:

• Design, maintain, and optimize multi-site enterprise networks (routing, switching, VLANs, VPNs).
• Configure, harden, and monitor enterprise firewalls and perimeter defenses.
• Implement cybersecurity protections aligned with best practices and CMMC/NIST control families.
• Lead incident response, system troubleshooting, and root-cause analysis to ensure minimal downtime.
• Manage and secure the company’s Microsoft GCC High environment, including: Azure AD administration- Intune device management- Microsoft Defender suite (endpoint, identity, and cloud security)- Security audits, logging, and compliance tooling
• Maintain enterprise configuration baselines and change-control documentation.
• Lead organizational cybersecurity governance aligned with CMMC objectives, implementing policies, internal controls, incident response, vulnerability assessments, and internal audits to keep the business secure
• Maintain RMF, NIST 800-53, and DoD 8510.01 compliance for all account and identity-management related workflows
• Manage enterprise cybersecurity activities including network defense, endpoint protection, secure configuration, Microsoft 365 security (MFA, conditional access, DLP), and role-based access management
• Maintain cybersecurity components of business continuity and disaster recovery plans and ensure secure collaboration across internal systems such as Teams, SharePoint, and OneDrive
• Support USG cybersecurity approval efforts by directing RMF work, developing SSPs and POA&Ms, conducting threat modeling, and preparing authorization packages for government review
• Coordinate with ISSOs, System Owners, engineering teams, government stakeholders, and accreditation authorities to drive secure, compliant mission-system development
• Participate in design reviews and technical interchange meetings to embed security requirements early in the program lifecycle
• Oversee integration, validation, testing, and continuous monitoring of security controls across development, deployment, and sustainment phases
• Work collaboratively with engineers, program staff, and leadership to support security requirements without disrupting critical operations. This includes exercising judgment and flexibility - for example, avoiding patch deployment or forced reboots during sensitive events such as flight testing
• Demonstrate creativity and resourcefulness in achieving cybersecurity objectives within the realities of a small business, ensuring compliance, mission support, and operational continuity coexist effectively

Information Systems Security Manager (ISSM) - Classified Networks The engineer will act as the ISSM for small classified environments, ensuring compliance with DoD and intelligence community security requirements.

Key duties:

• Develop, manage, and maintain cybersecurity documentation for classified systems (SSPs, POA&Ms, SOPs, etc.).
• Perform system audits, continuous monitoring, and vulnerability management.
• Lead security control implementation aligned with DoD RMF requirements.
• Coordinate with government security assessors and accreditors to maintain active system accreditation.
• Oversee required updates, assessments, and reporting to maintain compliance and operational readiness.

Cybersecurity Engineering & Accreditation Support for Programs/Contracts The engineer will support customer-funded programs that require cybersecurity engineering, cross-domain integration, and system accreditation for test or demonstration activities.

Key Duties

• Develop System Security Plans and cybersecurity engineering artifacts required under DoD RMF.
• Perform system architecture analysis, define security boundaries, and implement required controls.
• Prepare full accreditation packages, including eMASS entries, diagrams, and evidence documentation.
• Work directly with government Authorizing Officials / Security Customer Approval Authorities.
• Obtain and maintain Authority to Operate (ATO) or Interim Authority to Test (IATT) for flight tests, demonstrations, and other mission activities.
• Ensure secure integration of systems crossing classification or security boundaries.

• Bachelor’s degree in Cybersecurity, Computer Engineering, or related field (Master’s preferred)
• Willingness to travel up to 25%
• 7+ years of experience in cybersecurity governance, RMF compliance, system authorization, or defense/aerospace security operations
• Experience leading or supporting system accreditation efforts across USG or defense-related programs
• Proficiency in RMF documentation, SSPs, POA&Ms, and security evaluation processes
• Hands-on experience configuring enterprise networks and firewalls.
• Experience with designing multi-site network environments, establishing network architectures, drawings for efficient operations and security.
• Experience with enterprise cybersecurity operations including audits, incident response, vulnerability assessment, and security hardening
• Proficient with secure architecture, firewalls, VPNs, endpoint protection, and cloud security services
• Experience securing and managing Microsoft 365 environments including MFA, DLP, conditional access, and compliance monitoring
• Ability to serve in an ISSM-level role for classified systems.
• Proficiency with Azure AD, Intune, Defender, and Microsoft GCC High.
• Ability to obtain and maintain a TS/SCI clearance
• Strong communication, leadership, and collaboration skills

Preferred

• Security+, CISSP, and completion of the latest Cisco networking coursework (such as modern CCNA or successor)
• Experience with cross-domain solutions and flight-test accreditation
• Experience in small-business or multi-role engineering environments, * Education: Bachelor’s Degree (Master’s preferred)
• Experience: Cybersecurity / Defense Industry: 10 years (Preferred)
• Security Clearance: Top Secret / SCI (Active Preferred), * Network architecture: 5 years (Required)

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Paid time off