CSfC Systems Engineer Subject Matter Expert (SME)
About The Position
GES is seeking an experienced Systems Engineer Subject Matter Expert to join its Integrated Information Technology Support Services (I3TS) team and support a digital modernization program for the Defense Threat Reduction Agency (DTRA). The engineer will work with Leidos and Government technical leadership to drive innovation, growth, and efficiencies across the I3TS portfolio. The role focuses on architecting and maintaining Commercial Solutions for Classified (CSfC) infrastructure, including PKI and hardware security modules; managing VMware or Nutanix hyperconverged infrastructure; and implementing resilient backup and disaster recovery. The engineer will administer hardened Windows Server and Red Hat Enterprise Linux systems, establish centralized Syslog and audit logging, and apply DoW vulnerability patching and DISA STIG compliance to sustain Authorization to Operate. The role also includes automating CSfC end-user device gold-image provisioning and supporting continuous monitoring and SIEM ingestion. An active TS/SCI clearance is required at the time of consideration.
Requirements
- Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or a related STEM program, with 12–15 years of relevant experience; alternatively, a master's degree with 10–13 years of relevant experience. A doctorate in a technical domain may be held. Specific experience, education, and training may be considered in lieu of a degree.
- 12 or more years of progressive systems engineering experience in DoD/DoW, federal, or defense contractor enterprise environments.
- Active TS/SCI clearance.
- Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification, such as Security+ CE, CySA+, CASP+, or CISSP.
- Active computing-environment certification, such as VMware VCP/VCAP, Nutanix NCP, RHCE, or Microsoft Certified: Windows Server Hybrid Administrator Associate.
- Direct experience drafting CSfC Key Management Plans (KMPs) and Continuous Monitoring Plans (CMPs) for NSA CSfC PMO approval.
- Proficiency with PowerShell, Bash, and Ansible for automated STIG remediation, configuration drift detection, and certificate deployment.
- Advanced configuration of Rsyslog or Syslog-ng and forwarding architectures to enterprise SIEM platforms such as Splunk or Elastic.
Nice To Haves
- Experience designing, deploying, and maintaining IT infrastructures for DTRA or other DoW organizations.
Responsibilities
- Architect, deploy, and maintain CSfC infrastructure operating within Black, Gray, and Red networks.
- Design, configure, and maintain layered CSfC architectures aligned with NSA Data-At-Rest (DAR) and Mobile Access (MA) Capability Packages.
- Architect, deploy, and maintain Certificate Authorities, OCSP responders, and HSM-backed key protection in accordance with CSfC Key Management Requirements.
- Build, manage, and optimize virtualized compute and storage using VMware vSphere/ESXi or Nutanix AHV with vSAN or distributed storage.
- Design resilient, air-gapped backup and disaster recovery pipelines.
- Deploy, configure, and administer hardened Windows Server systems, including Active Directory, DNS, and Group Policy, and RHEL systems.
- Establish centralized, tamper-resistant Syslog and audit logging across network devices, systems, hypervisors, and operating systems to support continuous monitoring and SIEM ingestion.
- Forward log data through cross-domain systems to a centralized SIEM.
- Build and maintain automated OS deployment and gold-image pipelines using Microsoft Configuration Manager (MCM/SCCM) for CSfC end-user devices.
- Apply and validate patching and STIGs across virtual and physical infrastructure.
- Execute vulnerability scans, track IAVMs, and remediate findings to maintain ATO.
- Draft CSfC Key Management Plans and Continuous Monitoring Plans for NSA CSfC PMO approval.
- Use automation to remediate STIG findings, detect configuration drift, and deploy certificates.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
