We are seeking a Vectra AI Integration Engineer to deploy, tune, and sustain Vectra AI Detect sensors and Recall pipelines in physical data centers, air‑gapped networks, and enterprise on‑premise environments. This role focuses on network metadata, packet‑level telemetry, routing, sensor placement, and integration with on‑premise SOC tooling.
What You’ll Work On:
- Deploy and sustain Vectra AI sensors, collectors, and metadata pipelines in on‑premise networks.
- Integrate Vectra AI with on‑premise SIEM/SOAR/EDR, packet brokers, and analysis tools.
- Engineer physical and virtual sensor placement including SPANs, taps, packet brokers, and east‑west segmentation visibility.
- Manage routing, VLANs, packet capture, and metadata transformation.
- Support STIG‑aligned configurations and secure baselines consistent with your on‑prem operating guidance
- Build monitoring dashboards, sensor health checks, and performance tuning workflows.
- Coordinate with operations teams to ensure reliable on‑prem telemetry ingestion and threat detection fidelity.
Requirements
- 3+ years of hands-on experience with on‑premise network engineering or cybersecurity platforms.
- Experience deploying Vectra AI or similar Network Detection and Response (NDR) platforms (such as Corelight, Stellar, Cortex, Falcon, RevealX) in physical/virtual data center environments.
- Strong understanding of TCP/IP, DNS, TLS, HTTP/S, NetFlow/IPFIX, packet capture, and metadata pipelines.
- Experience with Zeek, Suricata, Arkime, Endace, or similar packet analytics tools.
- Experience with hardened OS builds, secure enclaves, access controls, and network segmentation.
- Proficiency with Linux engineering and system operations.
- Active TS/SCI clearance; willingness to take a polygraph exam
- HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
- Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 60 days of start date
- Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
Nice If You Have:
- Experience integrating NDR telemetry into SOC pipelines in secure on‑prem environments.
- Experience in environments with strict access controls or Zero Trust requirements
- Familiarity with virtualization platforms, physical rack deployments, and packet brokers.
- Experience with incident response and threat hunting based on raw network metadata.
Benefits
Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients.
Why ENS?
- Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS
- 401k Contribution from Day 1
- PTO + 11 Paid Federal Holidays
- Long & Short Term Disability Insurance
- Group Term Life Insurance
- Tuition, Certification & Professional Development Assistance
- Workers’ Compensation
- Relocation Assistance
Candidate AI Usage Policy
AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.