zero-trust jobs in San Diego

Design, deploy, and maintain enterprise Windows Server infrastructure with expertise in Active Directory, authentication systems (Kerberos, RADIUS, PKI), and DoD-compliant hardening (STIGs, CIS, Zero Trust). Develop Infrastructure-as-Code automation using PowerShell, Python, and Ansible across Windows and Linux environments, manage SCCM/MECM patch deployment and WSUS, and architect virtualized environments on KVM and EC2.…See more Mentor engineering teams on system integration, security, and cross-domain interoperability, and collaborate with cybersecurity, network, and Linux teams to solve complex enterprise deployment challenges.

S. Navy ships in San Diego.…See more ork Engineer to provide break/fix IT support for Navy afloat networks aboard U.S. Navy ships in San Diego. The role involves troubleshooting LAN issues, performing root cause analysis, administering Cisco switches/routers and Windows/Linux servers, and collaborating with Active Duty personnel and government staff to maintain systems such as ADNS, ISNS, CANES, FSW, and CENTRIXS. The engineer must hold an active Secret clearance, be able to obtain TS/SCI, and possess DoD IAT Level II certification plus a relevant operating-system certification (CCNA, Microsoft Server Hybrid Administrator Associate, Linux+, or equivalent). Travel within the U.S. and internationally (~25%) and occasional after-hours support are required.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

Senior Network Administrator with 10+ years of enterprise network engineering experience to design, deploy, and maintain complex routing, switching, and firewall infrastructure in multi-cloud DoD/government environments. Responsibilities include managing IP address space, VLANs, VPCs, and routing protocols (OSPF, BGP); implementing secure tunneling (IPsec) and Network Access Control solutions; supporting Zero Trust architectures; and coordinating with engineering and cybersecurity teams on network modernization.…See more Must hold an Active Secret clearance and DoD 8570/8140 IAT Level II certification plus a relevant Cisco or security certification (Security+, CySA+, GSEC, SCNP, or SSCP).

Sigma Defense seeks Network Engineers (I, II, or III) to configure, install, and maintain DoD network equipment across Navy Enterprise architecture, including switching, routing, firewalls, wireless, and VoIP systems. Candidates will design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity while applying network STIGs and integrating external services.…See more The role requires hands-on expertise with Cisco ISE, Palo Alto, next-gen firewalls, and deployment automation tools (Ansible, Python, PowerShell), scaling from 0–2 years (Level I) through 7+ years (Level III), with Security+ or CISSP certification mandatory.

The Network Engineer IV delivers advanced carrier training tactical system network engineering, integration, and sustainment for Navy afloat C4ISR operations within the CANES architecture. The role maintains, configures, and troubleshoots ruggedized network hardware and software baselines; provides direct technical support to shipboard ITs during Fleet training evolutions and underway testing; and ensures system readiness, cybersecurity compliance, and secure tactical data transport.…See more The engineer supports RMF artifacts, STIG application, vulnerability remediation, and Zero Trust hardening across Fleet units. 3–5 years of network engineering experience, CCNA/CCNP certification, DoD 8570 IAT Level II (Security+), and an active Secret clearance are required.

Lead an enterprise architecture team at a government IT modernization company, reporting to the CTO/CISO. Partner with executive leadership to develop technology strategy, govern technical standards across cloud, data, integration, infrastructure, security, and AI/automation, and oversee architectural quality and compliance.…See more Mentor technical teams, manage multiple concurrent projects, and ensure architectural decisions align with business objectives and zero-trust/NIST security principles.

Senior Network Engineer providing engineering, integration, testing, and operational support for complex Combined Test Bed (CTB) network environments in defense settings. Responsibilities include installation, configuration, upgrades, and STIG compliance of network infrastructure; monitoring and troubleshooting network performance at physical and IP packet levels; designing and maintaining secure multi-cloud connectivity across AWS and Azure; and configuring enterprise networking technologies including routing, switching, firewalls, IPsec, OSPF, and BGP.…See more Requires 10+ years in network engineering within enterprise or government environments, expertise in routing/switching platforms, Palo Alto firewalls, HPE Aruba solutions, cloud networking, and active Secret clearance with DoD 8570 IAT Level II and networking certifications (CCNA, CCNP, or CCDP).

The Network Engineer IV delivers advanced tactical network engineering, integration, and sustainment for Navy carrier training systems within the CANES architecture. The role involves maintaining, configuring, and troubleshooting shipboard network hardware and software, supporting NIWC Pacific and fleet operations during training exercises and deployment workups.…See more Key responsibilities include system sustainment, afloat technical support, cybersecurity compliance (RMF, STIG, Zero Trust), and automated testing. The engineer must hold or obtain a Secret clearance, possess CCNA/CCNP and Security+ certifications, and have 3–5 years of network engineering experience with Navy tactical networks (NIPR/SIPR/CANES).

This is a tiered network engineering role (I–III) supporting DoD Navy Enterprise Network architecture. Engineers will configure, install, and maintain network equipment including switches, routers, firewalls, wireless controllers, and network access control systems; design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity; and apply DoD security standards (STIGs) in coordination with cybersecurity teams.…See more Requirements scale with experience level (0–2 years for Level I, 3+ for Level II, 7+ for Level III) and include knowledge/expertise in Cisco ISE, Palo Alto, Zscaler, Ansible, Python, and PowerShell, plus Security+ or CISSP certification.

S. Navy RDT&E infrastructure, requiring 10+ years of enterprise network engineering experience.…See more iring 10+ years of enterprise network engineering experience. The Network Engineer will design, configure, and maintain complex routing, switching, and firewall solutions across on-premises and cloud environments (AWS/Azure), implement Zero Trust and network security architectures, and ensure STIG compliance and high-performance connectivity. Hands-on expertise with BGP, OSPF, IPsec, VLANs, HPE Aruba, Palo Alto firewalls, and enterprise monitoring tools (Traffic Sentinel, Zabbix) is essential. An active Secret clearance and IAT II certification (Security+, CCNA Security, or equivalent) are required.

Architect and maintain ServiceNow security controls aligned to DoD Zero Trust architecture in FedRAMP High and DoD IL4/IL5 environments. Configure role-based access controls (RBAC), access control lists (ACLs), data policies, and edge encryption; maintain security matrices and enforce information-level segregation.…See more Develop System Security Plans (SSPs) and Risk Management Framework (RMF) artifacts to support ATO attainment and sustainment. Conduct vulnerability assessments, continuous monitoring, manage Plans of Action and Milestones (POA&M), and generate security assessment reports.

Senior Network Engineer supporting mission-critical defense network environments at NIWC Pacific. Responsibilities include engineering, integration, testing, and maintenance of complex Combined Test Bed (CTB) network infrastructure, with emphasis on security, STIG compliance, and multi-cloud connectivity.…See more Required skills span enterprise routing/switching, firewall management, cloud networking across AWS and Azure, and network security technologies including Zero-Trust architectures. Must hold or be able to obtain Active Secret clearance and possess DoD 8570 IAT Level II and networking certifications.

S. Navy enterprise scale.…See more ponsible for directing network integration, system testing, troubleshooting, and documentation across cross-functional teams at a U.S. Navy enterprise scale. Mentor junior network engineers, provide technical guidance on complex issues, and serve as primary technical advisor to government clients on system architecture and solution design. Must have 10+ years configuring and troubleshooting Cisco enterprise infrastructure, including Catalyst Center/SDA, SD-WAN, ISE, routing protocols (OSPF, IS-IS, BGP), and enterprise security technologies. Will drive Software-Defined Access, SDN, Zero Trust, and automation initiatives while holding Secret clearance.

Design and own network security across Saronic's enterprise, on-premises, cloud, and maritime vessel communications infrastructure. Responsibilities include managing firewalls, segmentation, VPN/ZTNA, and wireless systems (Palo Alto, Cisco, Aruba); securing AWS VPC architecture in commercial and GovCloud; architecting secure vessel communications over cellular, RF, SATCOM, and mesh links with cryptographic key management; and building network observability and automation at scale.…See more Requires 5+ years of hands-on enterprise network security experience, production firewall and VPN operations, L3-L7 networking fundamentals, and the ability to obtain a U.S. security clearance.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll troubleshoot complex security challenges, manage Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities, and implement cybersecurity controls using tools like ACAS, STIGs, and eMASS.…See more The role requires 3+ years of DoD/government IT experience, expertise in operating systems (Windows, Linux), network infrastructure (routers, switches, firewalls, zero-trust), and compliance testing. You will communicate security findings to both technical and non-technical audiences while identifying advanced threats and supporting Navy missions.

Own and evolve infrastructure, deployment systems, and cloud environments powering Clinically AI's healthcare AI platform. Design and maintain GCP infrastructure with focus on GKE, Kubernetes, and secure multi-environment deployments; build Infrastructure-as-Code using Terraform and Helm charts; optimize CI/CD pipelines with GitHub Actions; implement observability, security best practices, and incident response.…See more Work closely with Backend, AI, and Product teams to support scalable infrastructure for services, AI pipelines, and high-throughput workloads.

Seneca Resources seeks a senior Network Engineer to provide hands-on engineering and operational support for a secure, on-premises research and test network environment in San Diego. The role involves day-to-day troubleshooting and maintenance of routers and switches, multi-cloud connectivity across AWS and Azure, routing protocols (OSPF, BGP), IPsec tunneling, and network security hardening with STIG compliance.…See more You will design and maintain NAC solutions, enterprise wireless infrastructure, and implement Zero Trust concepts like dynamic segmentation using tools such as HPE Aruba, Palo Alto, inMon Traffic Sentinel, and Zabbix. The position requires an Active Secret clearance, IAT Level II certification, a Master's degree in Computer Science or IT, and 10+ years of enterprise network engineering experience.

Senior-Level Network Engineer supporting mission-critical government systems in a 100% onsite San Diego role. The position requires 10+ years of hands-on enterprise networking experience, including routing, switching, firewall configuration, and cloud connectivity (AWS/Azure).…See more Responsibilities span network architecture design, OSPF/BGP configuration, Palo Alto and HPE Aruba administration, NAC/802.1X implementation, Zero Trust deployment, performance monitoring, infrastructure testing, and DoD STIG compliance.

Senior Network Administrator supporting Naval Information Warfare Center Pacific, responsible for designing, securing, and maintaining complex DoD network environments. Will perform network engineering, hardware configuration (routers, switches, firewalls), performance monitoring, cloud connectivity (AWS/Azure), routing protocol management, and cybersecurity compliance including Zero Trust architectures.…See more Requires 10+ years of enterprise network experience, active Secret clearance, and DoD 8570/8140 IAT Level II certification plus Cisco certification (CCNA/CCNP/CCDP).

Own and evolve the cloud infrastructure, deployment systems, and CI/CD pipelines powering Clinically AI's healthcare platform on GCP. Design and maintain cloud infrastructure using GKE, Terraform, and Helm; build reliable CI/CD pipelines with GitHub Actions; implement observability, security best practices, and incident response processes.…See more Work closely with Backend, AI, and Product teams to support scalable infrastructure for AI pipelines, real-time processing, and multi-environment deployments. Operate with significant autonomy across cloud-native architecture while optimizing for performance, reliability, cost, and compliance.

S. Navy initiatives.…See more , Systems will provide engineering, administration, and operational support for complex RDT&E and secure network environments supporting U.S. Navy initiatives. Responsibilities include configuring and maintaining routing, switching, firewall, and boundary protection solutions (HPE Aruba, Palo Alto); monitoring network performance with enterprise tools (Traffic Sentinel, Zabbix); implementing network security solutions (NAC, ClearPass, 802.1X, Zero Trust, IPsec); and managing cloud connectivity across AWS and Azure. The role requires 10+ years of enterprise network engineering experience, hands-on expertise with OSPF, BGP, IPsec, VLANs, cloud networking, STIG compliance, and firmware lifecycle management. Required qualifications include a Master's degree in Computer Science or related field, active Secret Clearance, and IAT II Certification (Security+, CySA+, CCNA Security, GSEC, GICSP, or SSCP).

Director leading a pre-sales security engineering team responsible for technical strategy, solution design, and customer-facing support across EVOTEK's cybersecurity portfolio. The role combines deep technical security expertise with people leadership, requiring mentorship of engineers/architects, oversight of enterprise solution design and proof-of-concept engagements, and alignment of technical capabilities with sales and delivery practices.…See more Responsibilities include RFP response, competitive positioning, vendor management, and technical presentations spanning AI security, network security, cloud security, identity & access management, endpoint/XDR, SIEM/SOAR, zero-trust architecture, and data protection. Must understand the VAR business model and translate complex technical capabilities into business value for enterprise stakeholders.