Cybersecurity and Network Security Engineer

Job Title: Cybersecurity and Network Security Engineer
Clearance Required: Public Trust Clearance
Work Location: Hybrid in Rockville, MD

Alpha Omega is seeking a qualified Cybersecurity and Network Security Engineer with in-depth experience in perimeter security solutions supporting National Institutes of Health (NIH) specifically the Office of Research Services/Office of Research Facilities (ORS/ORF). The ICS/OT/IoT Cybersecurity and Network Security Engineer will support the National Institutes of Health (NIH) in assessing, improving, and maintaining the cybersecurity posture of ICS (Industrial Control Systems), OT (Operational Technology), and IoT (Internet of Things) environments. The engineer will lead security audits, perform risk and vulnerability assessments, and develop remediation roadmaps tailored to the NIH's unique operational landscape. This position requires a balance of strategic planning and hands-on technical execution to ensure protection against internal and external cyber threats, both intentional and accidental.

Key Responsibilities:

• Conduct inventory and security risk assessments of hardware and software assets, identifying vulnerabilities and areas of obsolescence.
• Review and validate network architecture designs, ensuring adherence to industry best practices such as the “zones and conduits” model and proper use of Industrial DMZs.
• Evaluate and configure security appliances (e.g., firewalls, IDS, IPS) to ensure optimal security posture.
• Design and deploy network infrastructure including switches, routers, firewalls, and virtualization solutions.
• Analyze system logs, security events, and packet captures to detect threats, and recommend mitigation strategies.
• Perform cyber vulnerability assessments within manufacturing and critical infrastructure environments, including identifying unauthorized access, remote connection risks, and unsecure endpoints.
• Review government cybersecurity frameworks, policies, and plans to ensure compliance and applicability.
• Develop detailed security documentation including network diagrams, implementation plans, mitigation strategies, SAT procedures, and logical architecture plans.
• Travel to NIH sites as required to support on-site assessments and implementations.

Required Qualifications:

Education:

• Bachelor's degree in Engineering (Electrical, Mechanical, Chemical, or related), Computer Science, or a related technical discipline.

 Experience/Skills:

• Minimum of 5 years of hands-on experience designing, assessing, and implementing ICS/OT network architectures.
• Proficiency in OT communication protocols (e.g., Ethernet/IP, CIP, Modbus, OPC).
• Knowledge of industrial network topologies (e.g., ring, star).
• Familiarity with cybersecurity frameworks for ICS/OT such as ISA-99/IEC 62443, NIST SP 800-82, CIS, Purdue Model.
• Demonstrated ability to design and deploy Ethernet/IP communication systems.
• Experience with Nozomi Cyber-Physical System (CPS).

Preferred Qualifications:

• Certified SCADA Security Architect (CSSA).
• GIAC certifications such as GICSP, GRID, or CIP.
• ISA/IEC 62443 Cybersecurity certification.
• Networking certifications (e.g., CCNA, CCNP, JNCIP-ENT).
• Cybersecurity certifications (e.g., CEH, CISA, CISM, CCSP).
• Familiarity with MITRE ATT&CK for ICS and NERC CIP compliance frameworks.
• Knowledge of general cybersecurity frameworks (ISO/IEC 27001/27002, ISO 15408, NIST CSF, NIST SP800-53).
• Practical understanding of DCS, PLCs, SCADA, and related ICS systems.
• Experience in performing vulnerability assessments, penetration testing, and threat hunting within ICS/OT environments.
• Prior experience as a Control Systems or SCADA Engineer in manufacturing or power generation.
• Certified Professional Engineer (PE) is a plus.

Certification(s):

• CompTIA CCNA and CISSP certifications.

Salary and Benefit Information:

The likely salary range for this position is $92,000 - $135,000. This is not, however, a guarantee of compensation or salary. There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, education and certifications as well as contract provisions regarding labor categories that are specific to the position and could fall outside of this range.

Application Deadline: 7/19/2025

Joining the Alpha Omega