Red Team Infrastructure SME

Salary: $150,000 - 200,000 per year

Requirements:

• High school degree.
• At least 4 years of hands-on network and systems administration experience, including developing and deploying red-team exercise infrastructure; managing routers, switches, and firewalls; securing infrastructure; administering Active Directory lab environments; managing directory objects; installing Windows operating systems; and maintaining lab security through patches, policies, and monitoring.
• At least 2 years of direct, hands-on technical red-team and/or government computer network exploitation or attack operations experience. This must involve direct operations work, not solely support for red-team operations.
• At least 2 years of technical red-team and/or government computer network exploitation or attack operations leadership experience, separate from the direct operations experience above.
• At least 2 years of hands-on experience using, modifying, and customizing penetration-testing and red-team software frameworks, such as Cobalt Strike and Kali, to meet operational requirements.
• At least 2 years of independently conducting every phase of a red-team exercise without guidance or supervision.
• At least 2 years of hands-on experience developing payloads to bypass antivirus and endpoint detection and response solutions for red-team exercises.
• At least 2 years of experience mentoring junior and mid-level operators in red-team tradecraft and areas of advanced knowledge.
• At least 2 years of experience delivering technical red-team reports and briefings professionally.
• Must possess or obtain the CRTO certification within 90 days of the start date.
• OSCP, OSCE, OSEE, GXPN, and/or GPEN certifications are preferred but not required.
• Must be a U.S. citizen eligible to obtain a U.S. Courts background investigation.
• Ability to perform essential job functions, with or without accommodation; remain stationary for extended periods; operate standard office equipment; communicate effectively in person and remotely; occasionally move around the office and lift up to 20 pounds; maintain reliable attendance and work the assigned schedule; and travel up to 10% as needed.

Responsibilities:

• Develop, automate, and deploy red-team exercise infrastructure using technologies including Ubiquiti, Proxmox, Kubernetes, Ansible, Apache/NGINX, and GOCD for CI/CD.
• Deploy, configure, and maintain routers, switches, and firewalls.
• Protect red-team exercise infrastructure from unauthorized access and from DCO identification and fingerprinting techniques, tactics, and procedures.
• Create, configure, and administer Active Directory lab environments.
• Create, modify, and delete user accounts, groups, computer accounts, organizational units, and other directory service objects.
• Install Windows and Linux operating systems on lab systems as needed, along with required device drivers and software.
• Manage lab security by deploying patches and policies and monitoring activity for signs of intrusion or compromise.
• Maintain infrastructure for VPN access.
• Conduct and lead technical red-team and/or government computer network exploitation or attack operations.
• Independently carry out all phases of red-team exercises, develop operational payloads, and use or customize penetration-testing and red-team frameworks.
• Mentor junior and mid-level operators in red-team tradecraft and deliver technical reports and briefings.

Technologies:

• Active Directory
• Ansible
• CI/CD
• Cloud
• DevSecOps
• Support
• Kubernetes
• Linux
• Network
• Nginx
• Security
• VPN
• Windows
• Ada
• Census
• DevOps

More:

We are seeking a Red Team Infrastructure – SME to join our team on a contract supporting an important federal government mission. This is a hybrid role with one day on-site in Washington, DC. The base annual salary range for the position is $150,000–$200,000. At B&A, we have delivered customer-focused solutions since 1988, guided by dedication, commitment, partnership, trust, and recognition. We foster a collaborative culture and support employee growth through training, certifications, mentorship, cross-training, and professional development. We provide full-time employees with medical, dental, vision, life, disability, and other insurance options; paid time off; a 401(k) with company matching; commuter benefits; and wellness and employee assistance programs. We deliver secure, mission-critical IT solutions to government clients across all three branches, with expertise spanning cybersecurity, cloud, DevSecOps, data, intelligence, and related services. We are an equal opportunity employer, participate in E-Verify, and maintain a drug-free workplace; where applicable and permitted by law, employment is contingent on successful completion of pre-employment drug screening.

last updated 45 week of 2026