zero-trust jobs in San Diego

A senior network systems engineer responsible for designing, implementing, and maintaining enterprise network infrastructure including routing, switching, firewalls, and wireless systems. The role involves configuring and securing HPE Aruba and Palo Alto solutions, managing routing protocols (OSPF, BGP), implementing NAC and Zero-Trust architectures, and conducting network validation testing.…See more Requires 10+ years of network engineering experience, a bachelor's degree in a technical discipline, and an active Secret clearance with one of six specified IAT Level II certifications (Security+, CySA+, CCNA Security, GICSP, GSEC, or SSCP).

Cloud Engineer III providing technical leadership on cloud architecture, DevSecOps, and infrastructure across AWS, Azure, and on-premises environments. Designs and implements secure, compliant cloud solutions aligned with DoD standards (Impact Levels 4–6+, Zero Trust, RMF) and leads architecture reviews, deployment pipelines, and cross-functional technical planning.…See more Requires 10+ years of cloud architecture, platform engineering, and DevSecOps experience plus Security+ certification; will guide engineers, developers, cybersecurity teams, operators, and government stakeholders on complex infrastructure, containerization, and mission assurance.

This is a senior infrastructure and cybersecurity engineering role requiring 10+ years of experience designing, administering, and securing hybrid/cloud infrastructure across Linux, Windows Server, containerized, and private cloud environments. The engineer will implement security controls aligned with NIST SP 800-53, DISA STIGs, RMF, and Zero Trust principles, support DevSecOps pipelines and CI/CD automation, and use scripting, configuration management, and Infrastructure as Code to streamline builds, patching, hardening, and compliance.…See more The role demands collaboration across cybersecurity, software, infrastructure, and mission teams to troubleshoot complex issues, improve security practices, and communicate technical risks and recommendations.

Network Engineer supporting enterprise network infrastructure with 10+ years of experience managing complex DoD/government environments. Responsibilities include designing and maintaining routing, switching, firewall, and boundary protection systems (HPE Aruba, Palo Alto); managing multi-cloud connectivity (AWS, Azure) and IP address space; configuring advanced protocols (OSPF, BGP, IPsec); deploying Network Access Control and Zero Trust architectures; and establishing test environments with comprehensive documentation and regression testing.See more

Principal Systems Architect responsible for defining and maintaining the technical architecture of a complex enterprise automation ecosystem spanning RPA, Machine Learning, and GenAI. Will architect data pipelines integrating diverse enterprise systems (SAP, ERP, QMS, PowerBI, Windchill, Atlassian), provide technical leadership on workflow automation and DevSecOps infrastructure, and ensure end-to-end cybersecurity compliance with DoD standards and CMMC.…See more Role requires 14+ years of progressive IT systems architecture experience, demonstrating systems engineering expertise in complex data integration, AI/ML automation, and secure deployment across engineering, manufacturing, quality, and finance domains.

Senior Systems Engineer responsible for designing, implementing, securing, and optimizing enterprise Microsoft 365 and Azure environments for government and commercial clients. You will architect and deploy M365 services (Exchange Online, SharePoint, Teams, Intune, Entra ID) and Azure infrastructure (VMs, networking, storage, AVD, monitoring), lead cloud migrations and hybrid identity configurations, and develop security baselines and Zero Trust policies.…See more The role requires advanced PowerShell scripting, Infrastructure-as-Code practices, troubleshooting complex identity and cloud issues, and mentoring junior engineers while collaborating with security teams and stakeholders.

Lead enterprise IT systems engineering for Navy infrastructure modernization, architecting and securing Windows, Linux, and cloud server platforms across Active Directory, hybrid identity, virtualization, and Azure environments. Direct a team of IT systems engineers in deploying, optimizing, and troubleshooting mission-critical infrastructure while serving as on-site technical advisor to government clients on system architecture and modernization strategy.…See more Require 10+ years enterprise Windows Server experience, 3+ years technical leadership, expertise in AD/Entra hybrid identity, enterprise endpoint management (MCM/SCCM), and hyperconverged infrastructure, plus hands-on knowledge of PowerShell automation, Azure, and security hardening.

Cloud Engineer II supporting mission-critical cloud infrastructure for defense environments. Responsible for cloud deployment, configuration, troubleshooting, monitoring, and modernization across enterprise, hybrid, and containerized hosting environments.…See more Must demonstrate expertise in infrastructure automation, scripting, and Infrastructure as Code; familiarity with cloud networking, identity, compute, storage, security, and monitoring; and understanding of cybersecurity, access control, and compliance. Will collaborate with engineers, cybersecurity personnel, operators, program managers, and government stakeholders.

Cloud Engineer III responsible for designing, deploying, and sustaining secure cloud solutions across AWS, Azure, AWS GovCloud, and Azure Government environments. The role requires expertise in cloud architecture, Infrastructure as Code, DevSecOps, containerization, and Kubernetes, with a focus on mission-critical defense applications.…See more Candidates must demonstrate strong cloud networking, identity, storage, compute, and security capabilities, and communicate technical decisions to cross-functional teams including engineers, operators, cybersecurity personnel, and government stakeholders.

Senior Network Engineer supporting mission-critical defense network environments at Naval Information Warfare Center Pacific. Responsibilities include operational and engineering support for complex Combined Test Bed networks, including installation, configuration, upgrades, maintenance, and STIG compliance.…See more Design and maintain secure multi-cloud connectivity across AWS and Azure, configure enterprise routing/switching/firewall platforms, and implement network security solutions including Zero-Trust architectures, Aruba ClearPass, and NAC technologies. Requires 10+ years in enterprise/government network engineering, hands-on experience with Palo Alto firewalls, HPE Aruba solutions, OSPF, BGP, IPsec, and cloud networking, plus a Master's degree and active Secret clearance.

The Network Engineer, Systems will provide engineering, administration, and operational support for complex enterprise and cloud-based network environments supporting U.S. Navy RDT&E initiatives.…See more Responsibilities include configuring and troubleshooting routing, switching, firewalls, and security solutions; monitoring network performance; managing cloud connectivity across AWS and Azure; and ensuring STIG compliance. The role requires 10+ years of enterprise network engineering experience, hands-on proficiency with Cisco/Aruba/Palo Alto platforms, routing protocols (OSPF, BGP, IPsec), cloud networking, and Zero Trust architectures. An active Secret Clearance and IAT II certification (Security+, CCNA Security, GSEC, CySA+, GICSP, or SSCP) are required.

SAIC seeks a Network Engineer to provide break/fix IT support and cybersecurity patching for U.S. Navy afloat networks in a hybrid role based in San Diego, with frequent onsite work aboard Navy ships.…See more The role involves troubleshooting LAN and server issues, performing root-cause analysis, administering Cisco switches/routers and Windows/Linux systems, and delivering technical briefs. Required qualifications include 1+ years supporting military networks, current DoD IAT Level II certification (CompTIA Security+), active Secret clearance, and ability to obtain TS/SCI. Desired experience includes enterprise wireless technologies, next-generation firewalls, zero-trust architectures, and familiarity with Navy-specific systems like CANES, CENTRIXS, and VIXS.

Lead a comprehensive security architecture program for Logos Space's ground-based satellite terminals, with technical ownership of end-to-end security design across mmWave apertures, RF/baseband subsystems, and baseband hardware. Design and implement RF-related datalink security, secure wireless protocols, threat models, and secure provisioning workflows while ensuring compliance with FIPS and other cryptographic standards.…See more Mentor security engineers, oversee manufacturing security and chain-of-custody processes, and collaborate with hardware and RAN teams to integrate security controls. This is a hands-on role with potential to build a team, requiring 7–10 years of embedded security experience, proficiency in C/C++/Rust and Python, and deep knowledge of threat modeling, secure boot, firmware security, and anti-tampering mechanisms.

Network Systems Engineer responsible for designing, implementing, and maintaining enterprise network infrastructure including routing, firewalls, wireless, and security solutions. The role requires 10+ years of network engineering experience and involves configuring HPE Aruba and Palo Alto systems, managing routing protocols (OSPF, BGP), implementing NAC and Zero-Trust architectures, and collaborating with cloud engineering teams and customer stakeholders.…See more Must hold an active Secret clearance and one of six specified security certifications (Security+, CySA+, CCNA Security, GICSP, GSEC, or SSCP).

Design, deploy, and maintain enterprise Windows Server infrastructure with expertise in Active Directory, authentication systems (Kerberos, RADIUS, PKI), and DoD-compliant hardening (STIGs, CIS, Zero Trust). Develop Infrastructure-as-Code automation using PowerShell, Python, and Ansible across Windows and Linux environments, manage SCCM/MECM patch deployment and WSUS, and architect virtualized environments on KVM and EC2.…See more Mentor engineering teams on system integration, security, and cross-domain interoperability, and collaborate with cybersecurity, network, and Linux teams to solve complex enterprise deployment challenges.

SAIC seeks a mid-level Network Engineer to provide break/fix IT support for Navy afloat networks aboard U.S. Navy ships in San Diego.…See more The role involves troubleshooting LAN issues, performing root cause analysis, administering Cisco switches/routers and Windows/Linux servers, and collaborating with Active Duty personnel and government staff to maintain systems such as ADNS, ISNS, CANES, FSW, and CENTRIXS. The engineer must hold an active Secret clearance, be able to obtain TS/SCI, and possess DoD IAT Level II certification plus a relevant operating-system certification (CCNA, Microsoft Server Hybrid Administrator Associate, Linux+, or equivalent). Travel within the U.S. and internationally (~25%) and occasional after-hours support are required.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

Senior Network Administrator with 10+ years of enterprise network engineering experience to design, deploy, and maintain complex routing, switching, and firewall infrastructure in multi-cloud DoD/government environments. Responsibilities include managing IP address space, VLANs, VPCs, and routing protocols (OSPF, BGP); implementing secure tunneling (IPsec) and Network Access Control solutions; supporting Zero Trust architectures; and coordinating with engineering and cybersecurity teams on network modernization.…See more Must hold an Active Secret clearance and DoD 8570/8140 IAT Level II certification plus a relevant Cisco or security certification (Security+, CySA+, GSEC, SCNP, or SSCP).

Sigma Defense seeks Network Engineers (I, II, or III) to configure, install, and maintain DoD network equipment across Navy Enterprise architecture, including switching, routing, firewalls, wireless, and VoIP systems. Candidates will design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity while applying network STIGs and integrating external services.…See more The role requires hands-on expertise with Cisco ISE, Palo Alto, next-gen firewalls, and deployment automation tools (Ansible, Python, PowerShell), scaling from 0–2 years (Level I) through 7+ years (Level III), with Security+ or CISSP certification mandatory.

The Network Engineer IV delivers advanced carrier training tactical system network engineering, integration, and sustainment for Navy afloat C4ISR operations within the CANES architecture. The role maintains, configures, and troubleshoots ruggedized network hardware and software baselines; provides direct technical support to shipboard ITs during Fleet training evolutions and underway testing; and ensures system readiness, cybersecurity compliance, and secure tactical data transport.…See more The engineer supports RMF artifacts, STIG application, vulnerability remediation, and Zero Trust hardening across Fleet units. 3–5 years of network engineering experience, CCNA/CCNP certification, DoD 8570 IAT Level II (Security+), and an active Secret clearance are required.

Lead an enterprise architecture team at a government IT modernization company, reporting to the CTO/CISO. Partner with executive leadership to develop technology strategy, govern technical standards across cloud, data, integration, infrastructure, security, and AI/automation, and oversee architectural quality and compliance.…See more Mentor technical teams, manage multiple concurrent projects, and ensure architectural decisions align with business objectives and zero-trust/NIST security principles.

Senior Network Engineer providing engineering, integration, testing, and operational support for complex Combined Test Bed (CTB) network environments in defense settings. Responsibilities include installation, configuration, upgrades, and STIG compliance of network infrastructure; monitoring and troubleshooting network performance at physical and IP packet levels; designing and maintaining secure multi-cloud connectivity across AWS and Azure; and configuring enterprise networking technologies including routing, switching, firewalls, IPsec, OSPF, and BGP.…See more Requires 10+ years in network engineering within enterprise or government environments, expertise in routing/switching platforms, Palo Alto firewalls, HPE Aruba solutions, cloud networking, and active Secret clearance with DoD 8570 IAT Level II and networking certifications (CCNA, CCNP, or CCDP).

The Network Engineer IV delivers advanced tactical network engineering, integration, and sustainment for Navy carrier training systems within the CANES architecture. The role involves maintaining, configuring, and troubleshooting shipboard network hardware and software, supporting NIWC Pacific and fleet operations during training exercises and deployment workups.…See more Key responsibilities include system sustainment, afloat technical support, cybersecurity compliance (RMF, STIG, Zero Trust), and automated testing. The engineer must hold or obtain a Secret clearance, possess CCNA/CCNP and Security+ certifications, and have 3–5 years of network engineering experience with Navy tactical networks (NIPR/SIPR/CANES).

This is a tiered network engineering role (I–III) supporting DoD Navy Enterprise Network architecture. Engineers will configure, install, and maintain network equipment including switches, routers, firewalls, wireless controllers, and network access control systems; design and troubleshoot VLANs, routing protocols, IP addressing, and WAN connectivity; and apply DoD security standards (STIGs) in coordination with cybersecurity teams.…See more Requirements scale with experience level (0–2 years for Level I, 3+ for Level II, 7+ for Level III) and include knowledge/expertise in Cisco ISE, Palo Alto, Zscaler, Ansible, Python, and PowerShell, plus Security+ or CISSP certification.

This role supports mission-critical network operations for U.S. Navy RDT&E infrastructure, requiring 10+ years of enterprise network engineering experience.…See more The Network Engineer will design, configure, and maintain complex routing, switching, and firewall solutions across on-premises and cloud environments (AWS/Azure), implement Zero Trust and network security architectures, and ensure STIG compliance and high-performance connectivity. Hands-on expertise with BGP, OSPF, IPsec, VLANs, HPE Aruba, Palo Alto firewalls, and enterprise monitoring tools (Traffic Sentinel, Zabbix) is essential. An active Secret clearance and IAT II certification (Security+, CCNA Security, or equivalent) are required.