Infrastructure Engineer/Architect

Resource Management Concepts, Inc.•Charleston, SC

5d•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Denied, Disrupted, Intermittent, and Limited (DDIL) Subject Matter Expert to guide strategy and architecture for secure mission services operating under constrained connectivity. The role works at the intersection of tactical communications, systems engineering, and advanced cybersecurity, addressing the challenges of enforcing Zero Trust principles when enterprise identity providers, policy engines, and cloud trust brokers are degraded or unavailable. The engineer will establish resilient Policy Enforcement Points (PEPs) and decentralized Policy Decision Points (PDPs), architect edge-capable Identity, Credential, and Access Management (ICAM) solutions, and optimize cryptographic overhead across constrained tactical data links. The SME will advise Government stakeholders and engineering teams on local capabilities, caching and replication, trust periods, and safe reconnection, using technical judgment grounded in mission needs and DDIL experience. This position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.

Requirements

Active TS/SCI clearance with the ability to obtain a CI polygraph.
Expertise designing, evaluating, or fielding systems for denied, disrupted, intermittent, or limited connectivity (DDIL).
Experience architecting disconnected operations, local processing, and eventual synchronization.
Ability to translate operational constraints into requirements, architecture decisions, and testable performance criteria.
Knowledge of distributed systems, including consistency, replication, caching, conflict resolution, and recovery.
Experience managing offline identity, authentication, authorization, and credential dependencies.
Understanding of risks from stale attributes, delayed revocations, expired credentials, and unavailable policy or key services.
Ability to assess bandwidth, latency, packet loss, and availability impacts.
Experience developing technical strategies, architecture documentation, alternatives analyses, and roadmaps.
Ability to explain tradeoffs and risks to Government leaders and guide multidisciplinary engineering teams.

Nice To Haves

Experience deploying local PEPs and lightweight PDPs on edge appliances and dismounted kits.
Experience with modeling, simulation, and HWIL testing of tactical link degradation, EW effects, and packet loss.
Intelligence Community experience.
Bachelor’s or master’s degree.
Operational experience in tactical, deployed, expeditionary, or edge environments.
Experience with ICAM, virtual directories, federation, and local identity or attribute caching.
Experience with attribute-based access control, local enforcement, bounded offline access, and policy synchronization.
Experience with TDF, data tagging, encryption, and disconnected access enforcement.
Experience with disconnected PKI, certificate validation, credential renewal, and key availability.
Experience with store-and-forward messaging, durable queues, retries, duplicate handling, and reconnection reconciliation.
Experience with approved cross-domain and mission-partner identity or data exchanges.
Experience with AWS, Kubernetes, OpenShift, and enterprise-to-edge deployments.
Experience with network impairment testing, fault injection, and degraded-mode demonstrations.
Experience adapting Zero Trust controls for intermittent connectivity.
Experience with software-defined microsegmentation, overlay networks, and dynamic perimeters across tactical transports, including HF/VHF/UHF, SATCOM, mesh, and 5G.

Responsibilities

Develop DDIL strategies, architectural approaches, and implementation roadmaps for mission applications and supporting security services.
Work with mission owners to define operational scenarios, connectivity constraints, mission priorities, and acceptable levels of degraded service.
Translate scenarios into requirements for local autonomy, bandwidth use, latency, outage duration, synchronization, and recovery.
Define which identity, authorization, directory, credential, and data protection capabilities must remain available without enterprise reachback.
Architect local identity and attribute services, including virtual directories and approved caching of security information.
Establish approaches for cached attribute freshness, credential expiration, revocation awareness, authorization policy updates, and operation when authoritative sources cannot be reached.
Evaluate access-control tradeoffs, including when services should deny access, permit bounded local operation, or require additional safeguards.
Design synchronization and reconnection approaches addressing conflicting updates, stale identity data, audit records, and restoration of enterprise consistency.
Define dependencies among applications, identity providers, policy services, directories, encryption services, and key management infrastructure.
Assess data placement, replication, and protection requirements across connected and disconnected environments, including approved cross-domain interfaces.
Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased implementation recommendations.
Support agreements and approval documentation governing the caching and use of identity and security attributes.
Guide prototypes and demonstrations that validate architectural assumptions under representative network impairments.
Define measurable acceptance criteria and help teams evaluate mission continuity, security behavior, and recovery during connectivity loss and restoration.
Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation.