CSSP Engineer/Architect, SME
About The Position
FEDITC, LLC is seeking a CSSP Engineer/Architect, SME to lead cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring for the DFAS Common Computing Environment (CCE). The role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to help systems maintain their Authority to Operate (ATO). The position also leads CSSP engineering for security infrastructure, operates CSSP toolsets across unclassified and classified enclaves, and supports accreditation and reporting requirements. A U.S. citizenship and active Top Secret/SCI DoD security clearance are required.
Requirements
- At least 10 years of cybersecurity engineering experience.
- CISSP-ISSEP certification demonstrating security engineering expertise, or equivalent.
- DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification.
- Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools.
- Experience with SIEM solutions such as ArcSight or Splunk.
- Expertise in network forensics and traffic analysis.
- Experience with CSSP accreditation processes.
- Knowledge of JFHQ DODIN and Cyber Command reporting requirements.
- Experience engineering solutions for NIPRNet, SIPRNet, and JWICS.
- Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field.
- Active Top Secret/SCI clearance; must be a United States citizen and pass a background check.
- Maintain applicable security clearances at the level required by the client and/or applicable certifications as requested by FEDITC or required by its clients, customers, or prime contractors.
Nice To Haves
- GIAC certifications such as GPEN, GWAPT, or GCIH.
- Experience with DFAS CSSP operations.
- Prior DoD Cyber Command experience.
- Penetration testing certifications such as OSCP or CEH.
- Experience with DoD CSSP Evaluators Scoring Metrics.
- Zero Trust architecture implementation experience.
- Cloud security engineering experience.
Responsibilities
- Lead the CSSP engineering team for security infrastructure technologies.
- Engineer network perimeter defense appliances and SIEM toolsets.
- Operate CSSP-specific toolsets, including IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, and network forensics, for unclassified and classified enclaves.
- Develop and maintain the Cybersecurity Plan, due 30 days after the start of the period of performance.
- Ensure corrective action plans are reported and completed for all identified weaknesses.
- Maintain compliance with JFHQ DODIN/Cyber Command reporting requirements.
- Perform security reviews of new equipment deployed on CCE enclaves, targeting 95% CAT 1&2 compliance.
- Ensure 100% STIG compliance for new deployments.
- Operate and maintain CSSP accreditation, achieving three-year accreditation.
- Align technologies with Zero Trust architecture where applicable.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
