CSSP Engineer/Architect, SME

Description

The company supports the DoD and other intelligence agencies worldwide with mission critical national security systems that serve warfighters, DoD leadership and the country.

This role leads cybersecurity compliance, Risk Management Framework (RMF) accreditation and continuous monitoring for the DFAS Common Computing Environment (CCE). You will oversee Assessment and Authorization (A&A), FISMA compliance, audit readiness, vulnerability management and security documentation so systems keep their Authority to Operate (ATO).

Responsibilities

• Guide the CSSP engineering team on security infrastructure technologies.
• Design and engineer network perimeter defense appliances and SIEM toolsets.
• Run CSSP toolsets, including IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring and network forensics, across unclassified and classified enclaves.
• Build and keep up the Cybersecurity Plan, due 30 days after the period of performance begins.
• Make sure every identified weakness has a corrective action plan that is reported and completed.
• Meet 100% of JFHQ DODIN and Cyber Command reporting requirements.
• Security-review all new equipment deployed on CCE enclaves, reaching 95% CAT 1&2 compliance.
• Ensure new deployments reach 100% STIG compliance.
• Operate and maintain CSSP accreditation, targeting a 3-year accreditation.
• Align technologies with Zero Trust architecture where applicable.

Requirements

• 10+ years of cybersecurity engineering experience.
• CISSP-ISSEP certification, demonstrating security engineering expertise.
• DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification.
• Expert knowledge of IDS/IPS, ESS, ACAS and penetration testing tools.
• Experience with SIEM solutions such as ArcSight and Splunk.
• Strong network forensics and traffic analysis skills.
• Experience with CSSP accreditation processes.
• Knowledge of JFHQ DODIN and Cyber Command reporting requirements.
• Experience engineering solutions for NIPRNet, SIPRNet and JWICS.
• Bachelor's degree in Computer Science, Engineering, Information Technology or a related field.
• Optional: GIAC certifications (GPEN, GWAPT, GCIH).
• Optional: Experience with DFAS CSSP operations.
• Optional: Prior DoD Cyber Command experience.
• Optional: Penetration testing certifications (OSCP, CEH).
• Optional: Experience with DoD CSSP Evaluators Scoring Metrics.
• Optional: Zero Trust architecture implementation experience.
• Optional: Cloud security engineering experience.
• Accepted alternative to CISSP-ISSEP: an equivalent certification.

Conditions

US citizenship and an active Top Secret SCI DoD security clearance are required to be considered.

Maintain the security clearance(s) at the level the client requires and any certifications FEDITC or its clients and prime contractors request.

The company is an equal opportunity employer and makes employment decisions in line with applicable federal, state and local laws.