Engineer, Aviation Cybersecurity

Immediate need for a talented Engineer, Aviation Cybersecurity. This is a 12+months contract opportunity with long-term potential and is located in Dallas , TX (Onsite). Please review the job description below and contact me ASAP if you are interested.
 
Job ID:25-60543
 
Pay Range: $55 - $60/hour.  Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).
 
Key Responsibilities:

• Secure aircraft and ground systems by implementing and maintaining the ANSP, including PKI, VPN, and zero-trust solutions.
• Manage and maintain server infrastructure (Windows and Linux) supporting cybersecurity systems.
• Configure and manage network devices, including firewalls, VPN gateways, and intrusion detection systems.
• Manage cryptographic keys and digital certificates, ensuring compliance with industry standards.
• Respond to and manage security incidents, including forensic analysis and remediation.
• Collaborate with stakeholders to ensure secure and efficient operations.
• Stay updated on the latest developments in aircraft IT and network security.
• Support the development of security training programs.
• Monitor aviation systems for suspicious activities and analyze logs to identify threats.
• Perform risk assessments and ensure compliance with aviation-specific cybersecurity frameworks.
• Collect and analyze threat intelligence data, staying informed about emerging threats.
• Secure cloud environments for security log analysis and reporting.
• Includes designing the secure cloud architecture, configuring security groups, implementing IAM policies, ensuring data encryption (at rest and in transit).
• Conduct comprehensive security posture assessments of our ANSP ground systems.

Key Requirements and Technology Experience:

• Key Skills:Network, Systems, Cloud, and PKI Security
  Engineer, Network & Systems (ANSP Program) .
• Deep Cybersecurity Expertise: Requires 3-5+ years of progressive cybersecurity engineering experience with deep understanding of network, systems (including Windows and Linux server administration), cloud, and PKI security principles and technologies.
• Hands-on Technical Skills: Proficiency in managing firewalls, VPNs, IDPS, ZTNA, EDR, vulnerability scanning, configuration management tools, and CSPM solutions.
• Also includes demonstrated experience in Windows and Linux server configuration, hardening, maintenance, and security patching.
• Cloud & PKI Focus: Expertise in cloud security (AWS or Azure) and extensive experience with PKI infrastructure, certificate lifecycle management, and key management are essential.
• Secure Architecture & Vulnerability Management: Ability to design secure network architectures and conduct security assessments to identify and mitigate vulnerabilities, including system-level vulnerabilities on Windows and Linux servers.
• Aviation Security Contribution: Will contribute to critical FAA aircraft network security program duties, including securing communication between aircraft and ground systems, collaborating with OEMs, and ensuring the security and integrity of underlying Windows and Linux server infrastructure.
• PREFERRED CERTIFICATIONS:
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CompTIA Security+
• Cisco CCNA (Cisco Certified Network Associate)
• GIAC Security Essentials (GSEC) .
• Network Security:
• Enterprise-grade Firewalls: (e.g., Cisco Firepower, Palo Alto Networks, Fortinet)
• VPN & ZTNA Technologies: (e.g., RRAS, Tempered Airwall, Cisco AnyConnect, Zscaler, OpenVPN)
• Intrusion Detection/Prevention Systems (IDPS): (e.g., Snort, Suricata, Zeek)
• Monitoring Tools: (e.g., Wireshark)
• Experience with multiple vendors within these categories is beneficial.
• System Security (Server & Endpoint)
• Windows & Linux Server Security: Configuration, Hardening, Patching, Microsoft Active Directory and Group Policy
• Endpoint Detection and Response (EDR): (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint)
• Vulnerability Scanning: (e.g., Tenable Nessus, Tanium Comply)
• Configuration Management (for Security Automation): (e.g., Ansible, Puppet, Chef)
• Cloud Security (AWS or Azure Focus)
• Cloud Security Posture Management (CSPM): (e.g., AWS Security Hub, Azure Security Center)
• Cloud IAM & Access Control (AWS IAM, Azure AD)
• Cloud Security Services: (AWS & Azure native security offerings)
• Public Key Infrastructure (PKI)
• Certificate Authorities (CA): (e.g., Microsoft AD CS, OpenSSL)
• Key Management Systems (KMS): (e.g., Hardware HSMs, AWS KMS, Azure Key Vault, HashiCorp Vault).
• SURROUNDING TEAM/KEY PROJECTS:
• Lead the implementation of a new network security architecture for ground-based aviation systems, including use of firewalls, VPNs, and intrusion detection/prevention systems.
• Design and implement a secure hybrid cloud environment for aviation applications, ensuring compliance with industry standards and regulations.
• Develop and implement a comprehensive PKI solution for securing communication between aircraft and ground systems, including certificate lifecycle management and key management.
• Conduct security assessments of network infrastructure and systems, identifying vulnerabilities and recommending mitigation strategies.
• Collaborate with OEMs to evaluate the security of their products and services, ensuring they meet the requirements of aviation systems.
• FOCUS:
• Ensure secure aircraft, ground, and communications systems relied upon for our ANSP Program, with concentrated attention towards network, systems, cloud, and PKI security.

Our client is a leading IT Industry, and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.
 
Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy .

#Del J2W:CB3