Cyber Range Manager (1667)

SOLUTION ONE INDUSTRIES•Fayetteville, NC

9d•$118,708 - $152,208•Onsite

About The Position

Solution One Industries, Inc. is seeking an experienced Cyber Range Manager to support the U.S. Special Operations Command (USSOCOM) Special Operations Forces – Global Logistics Support Services (SOF GLSS) contract. The Cyber Range Manager is responsible for the design, build, operation, sustainment, and continuous improvement of closed-network cyber range and training environments used to train, certify, and evaluate cyber operators, mission teams, and supporting staff across the Special Operations enterprise. This position leads day-to-day range operations – including infrastructure engineering, environment provisioning, scenario development, exercise execution, and post-event assessment – while ensuring the range remains accredited, secure, and available to meet training and evaluation requirements. The Cyber Range Manager serves as the primary technical point of contact to the Government for range capability, scheduling, and capacity planning.

Requirements

Demonstrated experience in the following areas: Cyber range, simulation, or training environment design, build, and operations
Enterprise virtualization platforms (VMware vSphere/ESXi, Hyper-V, Proxmox, or equivalent)
Network emulation and lab build tooling (GNS3, EVE-NG, or equivalent)
Windows Server and Linux system administration, including Active Directory and domain services
Network engineering fundamentals: routing, switching, VLANs, VPNs, firewalls, and network segmentation
Scripting and automation (Python, PowerShell, Bash) for provisioning, reset, and orchestration
Security tooling and telemetry (SIEM, IDS/IPS, EDR, packet capture, log aggregation)
Threat emulation and offensive tooling used in training (Kali Linux, Metasploit, Cobalt Strike, Caldera, Atomic Red Team, or equivalent)
Risk Management Framework (RMF), DoD STIG implementation, and vulnerability management processes
Exercise planning, scenario development, and after-action reporting
Configuration management, change control, and technical documentation
Must meet DoD 8140/8570.01-M Information Assurance Technical (IAT) Level II or higher requirements at time of hire (Security+ CE, CCNA-Security, CySA+, GICSP, or equivalent).
Must be a U.S. Citizen.
Must possess or be eligible to obtain and maintain a Top Secret security clearance with SCI eligibility.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
8+ years of progressive cybersecurity, network engineering, or IT infrastructure experience (DoD/Army preferred)
3+ years of direct experience designing, managing, or operating a cyber range, cyber training environment, or comparable large-scale test and evaluation environment

Nice To Haves

Experience with DoD or Joint cyber training environments, including the Persistent Cyber Training Environment (PCTE) or comparable commercial range platforms
Prior support to USSOCOM, USASOC, a Theater Special Operations Command, or other Joint SOF organization
Infrastructure-as-code and configuration automation (Ansible, Terraform, Packer)
Containerization and orchestration (Docker, Kubernetes)
Cloud-hosted range or hybrid range experience (AWS, Azure, or GCP, including Government regions)
Knowledge of the DoD Cyberspace Workforce Framework and work role–based training requirements
Experience with adversary emulation aligned to MITRE ATT&CK and threat-informed training design
Instructional design, curriculum development, or formal instructor experience
Experience managing technical teams, schedules, and Government-facing deliverables
Advanced certifications strongly preferred: CISSP, CASP+, CEH, GCIH, GCIA, GPEN, OSCP, or VMware/Cisco professional-level certifications.
Master's degree preferred

Responsibilities

Manage the full lifecycle of the cyber range environment, including architecture, deployment, configuration, sustainment, capacity planning, and technology refresh.
Design and build representative network environments – enterprise, tactical, deployed, industrial control, and adversary infrastructure – using virtualization, containerization, and network emulation technologies.
Develop, maintain, and version-control training scenarios, injects, threat emulation profiles, and exercise scoring criteria aligned to unit mission-essential task lists and operator work roles.
Plan, coordinate, and execute individual, collective, and joint cyber training events, including red team, blue team, and full-scope force-on-force exercises.
Administer range scheduling, resource allocation, user account provisioning, and deconfliction across competing training and evaluation requirements.
Automate environment provisioning, snapshot/restore, and range reset activities using scripting and infrastructure-as-code tooling to reduce turnaround time between events.
Integrate and sustain security tooling within the range, including SIEM, endpoint detection and response, packet capture, intrusion detection, and traffic generation capabilities.
Maintain range accreditation and cybersecurity compliance in accordance with Risk Management Framework (RMF) requirements, applicable STIGs, and organizational security policy.
Perform vulnerability scanning, patching, hardening, and configuration management on all range assets and maintain associated documentation and artifacts.
Ensure strict isolation of range enclaves and safe handling of live malware, attack tooling, and sensitive datasets in accordance with approved procedures.
Prepare and maintain technical documentation, standard operating procedures, exercise plans, after-action reports, and range utilization metrics for Government leadership.
Provide instruction, mentorship, and technical support to exercise participants, white cell personnel, and junior range technicians.
Coordinate with Government stakeholders, unit training managers, cybersecurity personnel, and mission partners to identify emerging requirements and translate them into range capability.
Evaluate, recommend, and pilot new range platforms, tools, and technologies to keep the training environment current with the operational threat landscape.