Cyber Security Architect/Engineer (Endace Platform Engineer) - JB

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment!

We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls.

This position will be based at Reston, VA

Responsibilities:

• Lead the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture.
• Developpacket capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls.
• Buildhigh-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments.
• IntegrateEndace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms).
• Maintainand tuneEndace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle.
• Troubleshootpacket loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks.
• Monitordevice health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture.
• ManagePCAP retention strategies, indexing policies, and storage allocation across distributed deployments.
• AlignEndace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows.
• Ensurepacket capture and telemetry support identity-aware network segmentation and policy enforcement.
• Supportdevelopment of traffic baselines, segmentation decisions, and enforcement models using Endace data.
• Automatedeployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting.
• Builddashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams.
• Partnerwith network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage.
• Delivertraining and guidance to operational teams on Endace platform usage and best practices.

Qualifications:

* 5+ years of experience in cybersecurity engineering, network security, or SOC tooling.

* Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows.

* Proficiency in Linux administration and scripting (Python, Bash, PowerShell).

* Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA).

* Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models.

* Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms.

* Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.)

* Active TS/SCI clearance; willingness to take a polygraph exam

* Bachelor's degree and 5+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree.

* DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification

* Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date

* Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production.

* Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms).

* Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP.

* Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials.

* Strong analytical and problem-solving ability.

* Excellent communication and documentation skills.

* Able to collaborate with cross-functional technical and non-technical stakeholders.

* Comfortable leading architecture conversations and driving platform strategy.

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility.

Telos Corporation is an EEO/AA employer.