SME Network and Computer Systems Administrator

Goldbelt, Inc.•Oklahoma City, OK

About The Position

The SME Network and Computer Systems Administrator will serve as the primary architect and guardian of high-assurance communications within classified enclaves. The role implements security requirements mandated by DoDM 5205.07 and the JSIG, and designs, hardens, and maintains physically and logically isolated network infrastructures to prevent unauthorized lateral movement between compartmentalized program elements. The position is contingent upon the successful award of a contract currently under bid. The employer focuses on cybersecurity, information and operational technology, electronic security surveillance, and support services, offering solutions to Department of Defense contractors and others.

Requirements

Verifiable expertise defining, implementing, and sustaining SAP network systems, practices, and procedures for SAP facilities.
Verifiable expertise with products and systems used by the SAP community and familiarity with Air Force Instructions, JSIG-series regulations, or equivalent.
Excellent customer service, written communication, and verbal communication skills.
Ability to clearly and concisely explain technical matters to technical and non-technical audiences.
Hold professional U.S. Department of War Directive 8140.01 certifications appropriate to the duty position, such as CompTIA Security+.
At least 6 years of related experience.
Must hold a TOP SECRET security clearance.

Nice To Haves

Bachelor’s degree in a related field.

Responsibilities

Design and implement isolated local and wide-area multi-tenant network enclaves that enforce data-in-transit segregation between Special Access Required compartments.
Implement and verify physical and electromagnetic separation of classified (RED) and unclassified/cipher (BLACK) signal cabling, conduits, and equipment racks.
Configure, deploy, key, and maintain NSA-approved Type-1 HAIPE devices, such as KG-175 TACLANE, to establish secure point-to-point and mesh overlays.
Apply, script, and continuously audit DISA STIGs across multilayer switches, routers, and firewalls.
Develop network boundary diagrams, hardware and software baselines, port/protocol/service documentation, and control implementations for System Security Plans and authorization packages.
Engineer network segmentation using VRF-Lite/MPLS, 802.1Q VLAN isolation, and private ACLs to prevent unauthorized lateral traversal between compartments.
Enforce IEEE 802.1X port-level authentication, MAC address filtering, and dynamic VLAN assignment; disable and secure unassigned physical switch ports inside the SAPF.
Validate hash integrity and deploy firmware, software upgrades, and security definitions to air-gapped network appliances.
Perform intake, serial tracking, tamper inspections, and provenance verification of commercial network hardware before it is introduced into a SAP environment.
Support and maintain facility physical access control, intrusion detection, and video surveillance systems.
Support and maintain the organization’s video teleconferencing system.
Execute emergency technical network isolation procedures during suspected security incidents, data spills, or unauthorized cross-contamination.
Maintain configuration baselines, automate differential backups, and conduct configuration audits to prevent unapproved changes from invalidating the system’s Authority to Operate.