VectraAI On Premise Integration Engineer, Senior

The Opportunity

We are seeking an VectraAI Integration Engineer to deploy, tune, and sustain VectraAI Detect sensors and Recall pipelines in physical data centers, air‑gapped networks, and enterprise on‑premise environments. This role focuses on network metadata, packet‑level telemetry, routing, sensor placement, and integration with on‑premise SOC tooling.

What You’ll Work On

• Deploy and sustain VectraAI sensors, collectors, and metadata pipelines in on‑premise networks.
• Integrate VectraAI with on‑premise SIEM, SOAR, or EDR, packet brokers, and analysis tools.
• Engineer physical and virtual sensor placement, including SPANs, taps, packet brokers, and east‑west segmentation visibility.
• Manage routing, VLANs, packet capture, and metadata transformation.
• Support STIG‑aligned configurations and secure baselines consistent with your on‑prem operating guidance.
• Build monitoring dashboards, sensor health checks, and performance tuning workflows.
• Coordinate with operations teams to ensure reliable on‑prem telemetry ingestion and threat detection fidelity.

You Have

• 7+ years of experience with on‑premise network engineering or cybersecurity platforms
• Experience deploying NDR platforms in physical or virtual data center environments
• Experience with packet analytics tools such as Zeek, Suricata, Arkime, or Endace
• Experience with hardened OS builds, secure enclaves, access controls, and network segmentation
• Experience with Linux engineering and system operations
• Knowledge of TCP/IP, DNS, TLS, HTTP or HTTPS, NetFlow or IPFIX, packet capture, and metadata pipelines
• Active TS/SCI clearance; willingness to take a polygraph exam
• Associate’s degree and 10+ years of experience supporting IT projects and activities, Bachelor’s degree and 8+ years of experience supporting IT projects and activities, or Master’s degree and 6+ years of experience supporting IT projects and activities
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, or CCSP Certification within 30 days of start date
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date

Nice If You Have

• Experience integrating NDR telemetry into SOC pipelines in secure on‑prem environments
• Experience in environments with strict access controls or Zero Trust requirements
• Experience with virtualization platforms, physical rack deployments, and packet brokers
• Experience with incident response and threat hunting based on raw network metadata
• Security certifications, such as GCIA, GNFA, CISSP, or related Certifications

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Compensation

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Work Model

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.