Cybersecurity Systems Sustainment Engineer - JCHK

Semper Valens Solutions•Lackland Air Force Base, TX

1d•Hybrid

About The Position

Semper Valens Solutions, Inc. is seeking a Cybersecurity Systems Sustainment Engineer to support the Joint Cyber Hunt Kit (JCHK), a mobile cybersecurity platform used for threat hunting, network defense, incident response, digital forensics, and operational technology security. The platform combines networking, Linux operating systems, Kubernetes-based virtualization, distributed storage, and cybersecurity monitoring and analysis tools in a portable, deployable system. The engineer provides hands-on maintenance, troubleshooting, configuration management, and technical support for fielded JCHK systems. This mid-level individual-contributor role works alongside senior engineers and OEM technical teams. Support is provided during established hours of 0800–1700 local time, Monday through Friday, excluding Government holidays. The position is hybrid, with at least 3–4 days per week onsite at the Forge location in San Antonio, Texas, and may require travel to government and operational locations. A Secret clearance must be in place before performance begins. The role requires repeatedly lifting and transporting equipment weighing up to 50 pounds as needed.

Requirements

U.S. citizenship.
Ability to obtain and maintain a Secret security clearance; the clearance must be in place before the start of performance.
Current DoD 8140 qualification meeting applicable IAT Level II-equivalent requirements, such as CompTIA Security+ CE, maintained throughout performance.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, Information Systems, or a related technical discipline, or equivalent relevant technical experience.
Minimum 3–5 years of progressive experience in systems sustainment, systems administration, systems engineering, cybersecurity infrastructure support, or IT operations.
Demonstrated experience administering and troubleshooting Linux operating systems, preferably RHEL-compatible distributions such as Rocky Linux, Oracle Linux, CentOS, or Red Hat Enterprise Linux.
Demonstrated understanding of TCP/IP networking, routing, switching, DNS, DHCP, VLANs, and firewall technologies.
Experience with virtualization technologies such as VMware, KVM, KubeVirt, or equivalent platforms.
Experience with cybersecurity monitoring, network traffic analysis, vulnerability assessment, or incident response tools.
Working knowledge of scripting, automation, or configuration management using Bash, Python, Ansible, or YAML.
Strong troubleshooting and analytical skills, including the ability to methodically diagnose complex hardware and software issues.
Ability to maintain accurate technical documentation, configuration records, and troubleshooting procedures.
Strong written and verbal technical communication skills.
Ability to work independently and coordinate with engineering teams, program managers, and government personnel.
Ability and willingness to travel to government and operational locations for sustainment support.

Nice To Haves

Hands-on experience administering Kubernetes clusters and KubeVirt virtual machines.
Experience with Kubernetes networking using Multus CNI and distributed storage using Rook/Ceph.
Experience supporting Security Onion, Zeek, Suricata, Elastic Stack, and network security monitoring.
Experience configuring and troubleshooting pfSense Plus, FreeBSD, WireGuard, OpenVPN, and IPsec.
Experience with Velociraptor, endpoint telemetry, digital forensic artifact collection, and incident response.
Experience with PXE boot, DHCP, TFTP, Ansible, and automated system provisioning.
Experience administering FreeIPA and Linux identity management services.
Familiarity with Tenable Nessus, Greenbone/OpenVAS, Nmap, and NP-View.
Experience sustaining portable cyber defense systems, deployable network infrastructure, or mobile cyber threat-hunting platforms.
Familiarity with OT/ICS environments and network monitoring in operational technology networks.
Experience supporting disconnected, intermittent, and limited-bandwidth environments.
Familiarity with DoD cybersecurity operations, secure configuration management, system hardening, and vulnerability remediation.
Experience troubleshooting NVMe storage, self-encrypting drives, and secure data sanitization.
Experience working in Defense, Intelligence Community, or other government environments with similar mission or infrastructure requirements.
Preferred certifications, not required: RHCSA, RHCE, CKA, CKS, CCNA, CompTIA Linux+, CompTIA Network+, GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), ITIL Foundation or equivalent, or a cloud certification such as AWS Certified Solutions Architect, Google Cloud Professional, or CompTIA Cloud+.

Responsibilities

Maintain, troubleshoot, and provide technical support for deployed JCHK systems during established support hours.
Monitor system performance; diagnose hardware and software issues; and support system recovery and restoration.
Implement approved software patches, firmware updates, and configuration changes in accordance with OEM configuration management procedures.
Record system status, maintenance activities, configuration changes, and corrective actions in the designated system of record within two business days of each event.
Assist operators and coordinate with OEM engineering teams to investigate issues, identify root causes, and implement approved solutions.
Participate in technical meetings, system demonstrations, and operational support activities.
Administer and troubleshoot Linux (Rocky and FreeBSD) and Windows operating systems, including services, user accounts, storage, networking, and application configurations.
Support FreeIPA identity management, authentication, replication, and related services.
Support Kubernetes-based infrastructure, containerized applications, and virtual machines on JCHK hardware.
Troubleshoot virtualization, distributed storage, and network connectivity issues involving technologies such as KubeVirt, VMware, and Ceph.
Support system provisioning, configuration management, and automation using tools such as Ansible and PXE.
Help maintain authentication, DNS, DHCP, logging, and system monitoring services.
Troubleshoot TCP/IP networking, routing, switching, VLANs, firewalls, VPN connectivity using pfSense, and network segmentation.
Support network security monitoring, packet capture, and threat-hunting applications, including Security Onion, Suricata, and Zeek.
Maintain and troubleshoot cybersecurity applications used for endpoint monitoring, vulnerability assessment, network analysis, and digital forensics.
Investigate application errors, service failures, data collection issues, and integration problems across interconnected systems.
Support cybersecurity operations in isolated, tactical, and operational technology environments.
Maintain and troubleshoot JCHK hardware, including servers, network appliances, firewalls, switches, storage devices, and analyst laptops.
Perform component-level diagnostics and preventive maintenance, and replace components such as drives, memory, network interfaces, power supplies, and cables.
Support equipment setup, system recovery, configuration validation, and post-maintenance functional testing.
Coordinate hardware repairs, replacements, and technical escalations with OEM engineering and logistics personnel.
Maintain operational readiness of fielded systems and provide occasional onsite maintenance at government locations.
Travel to government and operational locations as needed for sustainment support.
Lift and transport equipment weighing up to 50 pounds repeatedly as required.