Cross-Domain Solution Engineer

MANTECH • Stafford, VA

1d • $128,000 - $214,400 • Onsite

About The Position

MANTECH seeks a motivated, career- and customer-oriented Cross-Domain Solution Engineer to support a current USMC contract in Stafford, Virginia. The Tactical Cross-Domain Solution Cyber Engineer serves as the primary security and technical implementation lead, or principal technical security and boundary defense lead, for cross-domain systems and transfer capabilities. The role ensures security-boundary crossings and data transfers comply with NSA Raise the Bar standards, National Cross Domain Strategy and Management Office (NCDSMO) validator expectations, service-level cross-domain offices, federal high-assurance standards, and enterprise cybersecurity directives.

The engineer leads and designs multi-enclave security boundaries; guides solutions through validation and government security approval pathways; configures, deploys, hardens, and sustains approved high-assurance cross-domain technologies; and coordinates with accreditation, cybersecurity, testing, sustainment, and validation stakeholders. The position also develops and reviews security authorization documentation and ensures boundary protection is suitable for deployed forces and austere, disconnected, contested, and DDIL tactical environments.

The position is onsite in Stafford, VA, with occasional travel to outdoor test and evaluation sites. An active TS/SCI clearance is required.

Requirements

• Bachelor’s degree and at least 5 years of related experience configuring, deploying, maintaining, and sustaining cross-domain solution technology; an additional 2 years of experience may substitute for the degree.
• Deep technical understanding of NSA Raise the Bar standards, NCDSMO validation processes, federal high-assurance cross-domain security standards, risk management frameworks, or direct accreditation experience.
• Experience designing multi-enclave security architectures, including data movement, data-flow boundary protection, security sanitization, deep content sanitization, and system-boundary delineation.
• Technical network security expertise covering gateways, ports, protocols, services, network boundary defense, secure gateway administration, approved ports/protocols management, COMSEC, KMI implementations, and cryptographic communications security.
• Experience architecting and securing automated, high-assurance data-sharing capabilities for resilient DDIL tactical operations and distributed environments.
• Current, active TS/SCI security clearance.

Nice To Haves

• Experience supporting cross-domain solution validation pathways, service-level security validator programs, and independent laboratory- or site-based security assessments to achieve ATO/IATT authorization or approval.
• Experience authoring or guiding a cross-domain solution ATO/IATT package through approval.
• Hands-on proficiency with commercial or government high-assurance cross-domain guard appliances and approved product baselines.
• Professional cybersecurity certifications aligned with advanced information assurance technical or management levels, such as CISSP.
• Background as a cyberspace officer or engineer, network/data systems administrator, NSA security engineer, service-level cross-domain solution engineer, military or federal civilian professional, or Defense industry cybersecurity engineering, cyber operations, or secure network engineering professional.

Responsibilities

• Lead, architect, and design multi-enclave security boundaries, defining allowable traffic flows, deep content inspection, boundary isolation, sanitization requirements, and security-boundary alignment.
• Guide cross-domain solutions through NSA Raise the Bar, NCDSMO, and formal government security validation pathways; identify accreditation constraints, prepare compliance evidence, and execute technical validation sequences.
• Configure, deploy, patch, install, harden, and sustain approved high-assurance cross-domain technologies, including guards, transfer devices, inspection engines, boundary appliances, and filter rule sets.
• Coordinate with accreditation, cybersecurity, testing, and sustainment stakeholders, security authorizing officials, and validation authorities; represent program interests to service cross-domain offices, NCDSMO, and enterprise forums.
• Design and enforce network-pathway and boundary security controls, including gateways, ports, protocols, services, routing policies, COMSEC, KMI controls, and cryptographic key management procedures.
• Develop, author, and review security authorization packages, including cross-domain solution charters, RMF artifacts, test plans, and security assessment documentation.
• Ensure integrations and boundary protections align with operational timelines, deployed-force requirements, and DDIL constraints, and remain operable, resilient, and compliant in austere, disconnected, and contested tactical environments.

Benefits

• Health insurance
• Life insurance
• Paid time off
• Holiday pay
• Short-term and long-term disability
• Retirement and savings
• Learning and development opportunities
• Wellness programs
• Optional benefit elections

What This Job Offers

• Job Type: Full-time
• Career Level: Senior