Jobs in the United States

25+ jobs

Save this search

Added just now
Software Engineer
KBR
Huntsville, AL
The KBR team in Huntsville, AL is seeking a Software Engineer I to support the development, sustainment, and modernization of software applications, databases, and supporting services used…
Added just now
Senior Airframe Assembly Manufacturing Engineer
Joby Aviation
Marina, CA
As a Manufacturing Engineer on the airframe assembly team, you will play a key role in the scale-up of Joby's high-volume aircraft production line. You will help the Joby team develop and…
Added 1 min ago
A
Sr. Scientist II, Engineering
AbbVie
North Chicago, IL
- $109,500 to $208,500 USD / year
…manufacturing environment. Once commercialized, the Process Engineer is responsible for continuous improvement activities, technical transfer to manufacturing sites, and resolution of…
Added 1 min ago
Senior Supplier Performance Engineer
Westinghouse Electric Company, LLC
Cranberry Township, NC
As a Senior Supplier Performance Engineer, you will support the fabrication of structural and mechanical components from supplier facilities.
Added 1 min ago
Engineer/Sr Engineer, UX AI
United States
…partner with UX, Engineering, Product, and platform teams to design, build, and scale AI-enabled solutions that improve the speed, quality, and consistency of digital…
Added 1 min ago
Staff AI Agent Engineer | Moveworks
ServiceNow
Remote, United States
…the primary technical point of contact throughout the full implementation lifecycle, from solution design through launch. You are equally comfortable whiteboarding with a customer's IT team…
Added 2 mins ago
Senior System Engineer
Belay Technologies
Maryland Area, MD
Belay Technologies is seeking a Senior Systems Engineer to join our intel team. This candidate will Analyzes user’s requirements, concept of operations documents, and high-level system…
Added 4 mins ago
Mechanical Engineer
Poly West
Henderson, NV
Poly West, a Division of Poly-America, L.P., leading plastics manufacturer, is currently seeking a Mechanical Engineer to join our engineering team at its Henderson Nevada facility.…
Added 5 mins ago
Staff Product Security Engineer
Intuitive
Sunnyvale, CA
Own and drive secure boot implementation across product platforms, including chain-of-trust design, bootloader hardening, and signing infrastructure.
Added 6 mins ago
Data Engineer (Faculty Specialist)
University of Maryland College Park (UMCP)
United States
The CATT Lab is seeking a mid-career or senior Data Engineer to join our Data Platform team. This individual will work to design, develop, and support over 40 relational database instances…
Added 6 mins ago
Senior Engineer, System Automation (Subsystems)
PsiQuantum
Milpitas, CA
This role is for a senior automation engineer who will design and maintain high-level control software for photonic, optical, electronic, and electro-optic subsystems, including large laser…
Added 7 mins ago
Software Engineer
Quest Analytics
Remote, United States
Take part in the full development lifecycle, from requirements gathering and design through implementation, testing, and deployment.
Added 8 mins ago
Principal Software Engineer (Hybrid)
BAE Systems
Greenlawn, NY
Job Description Do you want to design and develop software that truly matters - and contribute to a mission larger than yourself? Join us in protecting those who protect us by creating Next…
Added 8 mins ago
Principal Software Engineer (Onsite)
BAE Systems
Rome, NY
New Development: Design the architecture and implementation of new software features and standalone applications, translating complex customer requirements into scalable, high-performance…
Added 8 mins ago
Spacecraft Electronics Engineer
EraDrive
Palo Alto, CA
You will own the electrical design of Era-Node, EraDrive's spacecraft autonomy payload, from architecture and detailed design through implementation, qualification, integration, and…
Added 8 mins ago
Sr. Process Development & Automation Engineer
Genomic Health, Inc.
United States
…Laboratory Operations teams through automation selection, system design, integration, commissioning, and project documentation. The role’s influence extends to technical, quality, and…
Added 9 mins ago
Software Development Engineer II, Leo Commerce Financial Systems and Data (Bestia, Triton, Lucid)
Amazon Kuiper Manufacturing Enterprises LLC
Redmond, WA
…millions of customers? We are looking for a Software Development Engineer II to join our team at Amazon and help design, build, and operate systems that solve real-world problems at scale.…
Added 9 mins ago
Field Engineering Technician, Global Field Operations
Amazon Data Services, Inc.
Boston, MA
-Supervise the design and implementation of retrofits of existing facilities
Added 9 mins ago
Lead Software Engineer
ICF Resources, LLC
Reston, VA
ICF is seeking a hands-on Lead Engineer to deliver and improve EDT, an established software product. In this remote role, you will write and review code while owning architectural…
Added 9 mins ago
Lead Software Engineer
ICF Resources, LLC
Reston, VA
Lead design decisions, code reviews, troubleshooting, and implementation guidance while coordinating broader technical decisions with the engineering team.
Added 10 mins ago
Operations Support Engineer
Pence Companies
Salem, OR
The Operations Support Engineer assists in the development, implementation, and continuous improvement of company process control systems, training programs, and operational workflows.…
Added 10 mins ago
Systems Software Engineer – Database Engineering & Core Services
Mantis Security Corporation
Reston, VA
Design, implement, and troubleshoot networked applications using sockets, client-server architectures, and applicable network protocols.
Added 10 mins ago
Systems Software Engineer – Database Engineering & Core Services
Mantis Security Corporation
Charleston, SC
Design, implement, and troubleshoot networked applications using sockets, client-server architectures, and applicable network protocols.
Added 10 mins ago
Infrastructure Engineer/Architect - DDIL SME
Mantis Security Corporation
Reston, VA
…and cloud trust brokers is degraded or entirely severed. The engineer will establish resilient Policy Enforcement Points (PEP) and decentralized Policy Decision Points (PDP), architect…
Added 10 mins ago
Infrastructure Engineer/Architect - DDIL SME
Mantis Security Corporation
Charleston, SC
…and cloud trust brokers is degraded or entirely severed. The engineer will establish resilient Policy Enforcement Points (PEP) and decentralized Policy Decision Points (PDP), architect…

Mantis Security Corporation

Infrastructure Engineer/Architect - DDIL SME

Reston, VA, United States

Apply About employer

Applications open in a new tab.

Job details

Apply by: Feb 7, 2027
Posting language: English
Posted: Nov 9, 2026

Original job description

Mantis Security is seeking a Denied, Disrupted, Intermittent, and Limited (DDIL) Subject Matter Expert to guide strategy and architecture for secure mission services operating under constrained connectivity. This role focuses on operating at the intersection of tactical communications, systems engineering, and advanced cybersecurity, this role addresses the unique technical challenges of enforcing Zero Trust principles (continuous verification, least privilege access, explicit risk-based attestation) when continuous reachback to enterprise identity providers, policy engines, and cloud trust brokers is degraded or entirely severed. The engineer will establish resilient Policy Enforcement Points (PEP) and decentralized Policy Decision Points (PDP), architect edge-capable Identity, Credential, and Access Management (ICAM) solutions, and optimize cryptographic overhead across constrained tactical data links.

We are looking for someone who has designed, evaluated, or fielded systems for these conditions and understands the tradeoffs involved. The SME will help Government stakeholders and engineering teams determine which capabilities must operate locally, what information can be cached or replicated, how long that information remains trustworthy, and how systems reconnect safely. Success requires sound technical judgment grounded in mission needs and experience beyond traditional enterprise availability planning.

What You’ll Do

Develop DDIL strategies, architectural approaches, and implementation roadmaps for mission applications and supporting security services.
Work with mission owners to define operational scenarios, connectivity constraints, mission priorities, and acceptable levels of degraded service.
Translate those scenarios into requirements for local autonomy, bandwidth use, latency, outage duration, synchronization, and recovery.
Define which identity, authorization, directory, credential, and data protection capabilities must remain available without enterprise reach back.
Architect local identity and attribute services, including virtual directories and approved caching of security information.
Establish approaches for cached attribute freshness, credential expiration, revocation awareness, authorization policy updates, and operation when authoritative sources cannot be reached.
Evaluate access control tradeoffs, including when services should deny access, permit bounded local operation, or require additional safeguards.
Design synchronization and reconnection approaches that address conflicting updates, stale identity data, audit records, and restoration of enterprise consistency.
Define dependencies among applications, identity providers, policy services, directories, encryption services, and key management infrastructure.
Assess data placement, replication, and protection requirements across connected and disconnected environments, including approved cross-domain interfaces.
Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased implementation recommendations.
Support agreements and approval documentation governing the caching and use of identity and security attributes.
Guide prototypes and demonstrations that validate architectural assumptions under representative network impairments.
Define measurable acceptance criteria and help teams evaluate mission continuity, security behavior, and recovery during connectivity loss and restoration.
Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation.

Basic Qualifications

Active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with ability to obtain a Counterintelligence (CI) Polygraph.
Demonstrated subject matter expertise designing, evaluating, or fielding systems that operate with denied, disrupted, intermittent, or limited connectivity.
Experience developing mission or enterprise architectures that support disconnected operation, local processing, and eventual synchronization with authoritative services.
Ability to translate operational constraints into technical requirements, architectural decisions, and testable performance criteria
Understanding of distributed systems concepts, including consistency, replication, caching, conflict resolution, and failure recovery.
Experience addressing identity, authentication, authorization, or credential dependencies when enterprise services are unavailable.
Understanding of the security implications of stale attributes, delayed revocation information, expired credentials, and unavailable policy or key services.
Experience assessing bandwidth, latency, packet loss, and network availability constraints and their effects on application and service behavior.
Experience developing technical strategies, architecture documentation, alternatives analyses, and implementation roadmaps.
Ability to explain architectural tradeoffs and residual risks to Government decision-makers and provide actionable guidance to engineering teams.
Experience working across mission, cybersecurity, infrastructure, and application development stakeholders.
Experience deploying localized Policy Enforcement Points (PEPs) and lightweight Policy Decision Points (PDPs) on edge compute appliances and dismounted kits.
Experience conducting modeling, simulation, and hardware-in-the-loop (HWIL) testing to replicate tactical link degradation, electronic warfare (EW) effects, and packet-loss profiles.

Desired Qualifications

Operational DDIL experience: Experience supporting deployed, tactical, expeditionary, edge, or other mission environments with constrained reach back.
Identity services: Experience with Identity, Credential, and Access Management (ICAM), virtual directories, identity federation, and local identity and attribute caching.
Authorization design: Experience with attribute-based access control, local policy enforcement, bounded offline access, and synchronization of authorization policies.
Data protection: Familiarity with Trusted Data Format (TDF), data tagging, encryption, and access enforcement when central services are unavailable.
Key and certificate services: Experience addressing Public Key Infrastructure (PKI), certificate validation, credential renewal, and key availability in disconnected environments.
Distributed applications: Experience with store-and-forward messaging, durable queues, retry behavior, duplicate handling, and reconciliation after reconnection.
Cross-domain environments: Experience defining approved identity and data exchanges across security domains and mission partner boundaries.
Cloud and edge platforms: Familiarity with Amazon Web Services (AWS), Kubernetes, Red Hat OpenShift, and deployment patterns spanning enterprise and local infrastructure.
Validation and experimentation: Experience using network impairment testing, fault injection, or operational demonstrations to assess degraded-mode behavior.
Zero Trust: Experience adapting identity, device, application, and data security controls to environments where continuous enterprise connectivity cannot be assumed.
Segmentation: Experience implementing software-defined micro segmentation, overlay networks, and dynamic perimeter controls across non-standard transport channels (e.g., HF/VHF/UHF, SATCOM, mesh radios, 5G tactical bubbles).

Apply About employer

More about this job

Skills

Data protection
Inspect data
Documentation
Conflict resolution
Cybersecurity
Microsoft Access
AWS
Kubernetes
Red Hat OpenShift
Apply information security policies

Report this job