Network & Cybersecurity Engineer

The Network & Cybersecurity Engineer at Redwood Strong LLC will support enterprise IT operations and classified network security for defense programs, including cybersecurity engineering, RMF/DoD compliance, and accreditation package support. This hybrid role is based in Roanoke, TX and includes ownership across multi-site network defense and Microsoft GCC High environments.

Role Overview

You will serve as the technical owner for enterprise network infrastructure with accountability for security, availability, and scalability. The position also includes managing and hardening Microsoft GCC High cloud environments, leading incident response and troubleshooting activities, and maintaining compliance aligned to RMF, NIST 800-53, and DoD 8510.01 requirements for account and identity-management workflows.

Responsibilities

• Serve as technical owner for enterprise network infrastructure, ensuring security, availability, and scalability.
• Design, maintain, and optimize multi-site enterprise networks, including routing, switching, VLANs, and VPNs.
• Configure, harden, and monitor enterprise firewalls and perimeter defenses.
• Implement cybersecurity protections aligned with best practices and CMMC/NIST control families.
• Lead incident response, system troubleshooting, and root-cause analysis to minimize downtime.
• Manage and secure the Microsoft GCC High environment, including Azure AD administration, Intune device management, Defender (endpoint, identity, and cloud security), and security audits, logging, and compliance tooling.
• Maintain enterprise configuration baselines and change-control documentation.
• Lead cybersecurity governance aligned with CMMC objectives by implementing policies, internal controls, incident response, vulnerability assessments, and internal audits.
• Maintain RMF, NIST 800-53, and DoD 8510.01 compliance for all account and identity-management related workflows.
• Oversee enterprise cybersecurity activities, including network defense, endpoint protection, secure configuration, Microsoft 365 security (MFA, conditional access, DLP), and role-based access management.
• Maintain cybersecurity components of business continuity and disaster recovery plans and support secure collaboration across Teams, SharePoint, and OneDrive.
• Support USG cybersecurity approval efforts by directing RMF work, developing SSPs and POA&Ms, conducting threat modeling, and preparing authorization packages for government review.
• Coordinate with ISSOs, System Owners, engineering teams, government stakeholders, and accreditation authorities to support secure and compliant mission-system development.
• Participate in design reviews and technical interchange meetings to embed security requirements early.
• Oversee security control integration, validation, testing, and continuous monitoring across development, deployment, and sustainment phases.
• Exercise judgment to support security requirements without disrupting critical operations, including avoiding patch deployment or forced reboots during sensitive events such as flight testing.
• Act as the ISSM for small classified environments, ensuring alignment with DoD and intelligence community security requirements.
• Develop and maintain classified cybersecurity documentation for systems, including SSPs, POA&Ms, and SOPs.
• Perform system audits, continuous monitoring, vulnerability management, and security control implementation aligned with DoD RMF requirements.
• Coordinate with government security assessors and accreditors to maintain active system accreditation.
• Oversee required updates, assessments, and reporting to maintain compliance and operational readiness.
• Develop System Security Plans and related cybersecurity engineering artifacts required under DoD RMF.
• Perform system architecture analysis, define security boundaries, and implement required controls.
• Prepare full accreditation packages, including eMASS entries, diagrams, and evidence documentation.
• Work with government Authorizing Officials / Security Customer Approval Authorities.
• Obtain and maintain ATO or IATT for flight tests, demonstrations, and other mission activities.
• Ensure secure integration of systems crossing classification or security boundaries.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Engineering, or related field (Master’s preferred).
• 7+ years of experience in cybersecurity governance, RMF compliance, system authorization, or defense/aerospace security operations.
• Experience leading or supporting system accreditation efforts across USG or defense-related programs.
• Proficiency in RMF documentation, SSPs, POA&Ms, and security evaluation processes.
• Hands-on experience configuring enterprise networks and firewalls.
• Experience designing multi-site network environments and establishing network architectures and drawings for efficient operations and security.
• Experience with enterprise cybersecurity operations including audits, incident response, vulnerability assessment, and security hardening.
• Proficiency with secure architecture, firewalls, VPNs, endpoint protection, and cloud security services.
• Experience securing and managing Microsoft 365 environments including MFA, DLP, conditional access, and compliance monitoring.
• Ability to serve in an ISSM-level role for classified systems.
• Proficiency with Azure AD, Intune, Defender, and Microsoft GCC High.
• Ability to obtain and maintain a TS/SCI clearance.
• Strong communication, leadership, and collaboration skills.
• CISSP (Required).
• Top Secret (Required).
• Network architecture: 5 years (Required).
• Work location: Hybrid in Roanoke, TX 76262 (3 - 4 days in office).
• Travel: Up to 25% (Required).
• Job type: Full Time.

Preferred Qualifications

• Security+, CISSP, and completion of the latest Cisco networking coursework (such as modern CCNA or successor).
• Experience with cross-domain solutions and flight-test accreditation.
• Experience in small-business or multi-role engineering environments.
• Education: Bachelor’s Degree (Master’s preferred).
• Experience: Cybersecurity / Defense Industry: 10 years (Preferred).

Technologies

• Azure AD
• Intune
• Microsoft Defender suite (endpoint, identity, and cloud security)
• Microsoft Defender
• Microsoft GCC High
• Microsoft 365
• MFA
• Conditional access
• DLP
• Teams
• SharePoint
• OneDrive
• eMASS
• VPNs
• Firewalls
• VLANs

Compensation

USD 140,000 - 190,000 per year.

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Paid time off