Enterprise Systems Engineer #1750275

Network Designs Inc.•Fayetteville, NC

About The Position

NDi is looking for an experienced Enterprise Systems Engineer to support mission-critical DoD environments across multiple security domains. In this role, you'll work hands-on with advanced Windows enterprise services, PKI, IPv6, and secure network architectures while helping integrate Commercial Solutions for Classified (CSfC) systems into existing DoD networks. You'll troubleshoot complex multi-enclave issues, collaborate with DoD partners, and support ATO and cybersecurity compliance activities. Military Veterans Encouraged to Apply.

Requirements

Must possess a minimum of an active Secret Security Clearance.
Willingness and ability to travel up to 3 to 6 months at a time to one of the following locations: Washington State, Hawaii, Arizona, Virginia, North Carolina, Germany, Kuwait, South Korea.
Must have a valid current passport.
Advanced degree in Computer Science, Information Technology, Cybersecurity, or related field.
Minimum of 15 years of experience in enterprise systems engineering.
Have one of the following certifications or their legacy certifications (i.e. MSCE, MCSA, MCSE)
GCWN - GIAC Windows Security Administrator
WSHAA - Microsoft Certified: Windows Server Hybrid Administrator Associate
MCEAE - Microsoft 365 Certified: Enterprise Administrator Expert
MCIAA - Microsoft Certified: Identity and Access Administrator Associate
MCAE - Microsoft Cybersecurity Architect Expert
Extensive enterprise-level experience integrating or sustaining systems across multiple DoD security domains (NIPR and SIPR). JWICS and coalition networks exposure, nice to haves.
Must have experience with IPv6 routing configuration.
Advanced enterprise-level experience with Microsoft Windows systems, including:
Active Directory (multi-domain/multi-forest environments)
Group Policy (GPO) design and enforcement.
Microsoft Certificate Authority & PKI
Windows Server 2016/2019/2022
Windows enterprise services (DNS, DHCP, WSUS, Failover Clustering)
Experience implementing DoD STIGs
Demonstrated experience integrating systems and services at an enterprise scale within DoD environments across multiple security domain levels.
Solid understanding of network protocols, including MPLS, BGP, OSPF, EIGRP, LAN/WAN/WLAN, and secure network architectures.
Solid understanding of network security devices, including firewalls, VPNs, IPS/IDS, and the impact & importance of their Access Control List being properly set up.
Experience in enterprise logging (Syslog), monitoring, and audit policy configuration.
Understanding of DoD cybersecurity frameworks, including RMF, NIST 800-171, NIST 800-53, DISA STIGs

Nice To Haves

Nice to have Certifications not a must: CCIE, CCNP
Extensive enterprise-level experience integrating or sustaining systems across multiple DoD security domains (NIPR and SIPR). JWICS and coalition networks exposure, nice to haves.
Familiarity with cloud environments. Experience with DoD IL6 is a nice-to-have.
Prior experience supporting or leading CSfC integrations.
Experience with cross-domain solutions (CDS) technologies and architectures.
Experience with:
DoD Comply-to-Connect (C2C)
Cisco ISE or similar authentication mechanisms/technologies
What's Up Gold or other enterprise monitoring tools.
Proficiency in leveraging PowerShell, Python, or similar scripting languages to create an automated solution for multiple devices in an enterprise environment.

Responsibilities

Integrate and partially maintain enterprise services for a multi-domain Commercial Solutions for Classified (CSfC) systems to an existing DoD network.
As needed, document and maintain enterprise diagrams, system configurations, security controls, and operational procedures.
Work with a team to set up Windows-based services and applications on a standalone network to integrate with existing DoD Networks (Classified and Unclassified)
Coordinate with DoD stakeholders, contractors, and mission partners to ensure compliance with classified networking standards.
Perform advanced troubleshooting of Windows, network, PKI, and multi-enclave interoperability issues.
Work with a team of Network Engineers to implement and manage secure VPN, remote access, encryption, authentication, and access control solutions.
Work with the contracting Cyber Team to support Authorization to Operate (ATO) activities through documentation, testing, and technical validation.
Participate in extended travel assignments supporting the projects at domestic and international DoD sites.