Cross-Domain Solution Engineer

MANTECH; Stafford (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

MANTECH seeks a motivated Cross-Domain Solution Engineer to support a USMC contract in Stafford, VA. The role leads security-boundary design, data-flow enforcement, and compliance with NSA Raise the Bar and NCDSMO standards.

You will guide accreditation, implement high-assurance cross-domain technologies, and coordinate with security authorities to maintain secure, resilient operations in diverse environments. Requires TS/SCI and multi-enclave experience.

Qualifications

• Bachelor’s degree with 5+ years configuring, deploying, maintaining cross-domain solutions; 2 extra years may substitute for degree.
• Deep knowledge of NSA Raise the Bar, NCDSMO validation, and federal high-assurance cross-domain standards.
• Multi-enclave security architecture design experience, including data boundary protection and sanitization.
• Technical network security skills covering gateways, ports, protocols, and cryptographic controls.
• Experience securing automated data-sharing for DDIL operations and distributed environments.

Responsibilities

• Lead design of multi-enclave security boundaries and data flows.
• Navigate NSA Raise the Bar and NCDSMO validation pathways for cross-domain solutions.
• Configure, deploy, patch, harden, and sustain high-assurance cross-domain technologies.
• Coordinate with accreditation, cybersecurity, testing, and validation stakeholders.
• Manage network boundary controls, gateways, and cryptographic key management processes.
• Support development of RMF artifacts and security assessment documentation.
• Ensure operations remain compliant in austere and contested environments.

Skills

Cross-domain architecture design

NSA Raise the Bar standards

NCDSMO validation

Network security

COMSEC/KMI

Education

Bachelor’s degree

Tools

Enterprise guards

Tactical transfer devices

Cross-domain appliances

Job description

MANTECH seeks a motivated, career and customer-oriented Cross-Domain Solution Engineer to help support our current USMC contract out of Stafford, VA.

The Tactical Cross-Domain Solution Cyber Engineer serves as the primary security and technical implementation lead or principal technical security and boundary defense lead for cross-domain systems and transfer capabilities. This role ensures security-boundary crossings and data transfers comply with National Security Agency (NSA) Raise the Bar standards, National Cross Domain Strategy and Management Office (NCDSMO) validator expectations, service-level cross-domain offices, federal high-assurance standards, and enterprise cybersecurity directives.

Responsibilities Include But Are Not Limited To

• Lead, architect, and design multi-enclave security boundaries, determining allowable traffic flows, deep content inspection requirements, boundary isolation controls, sanitization requirements, and security-boundary alignment relative to supported platforms and programs.
• Navigate and guide cross-domain solutions through NSA Raise the Bar and NCDSMO validation pathways, as well as formal government security validation pathways, identifying accreditation constraints, preparing technical compliance evidence, and executing required technical validation sequences.
• Directly configure, deploy, patch, install, harden, and sustain approved and high-assurance cross-domain technologies (e.g., enterprise guards, tactical/small-form-factor transfer devices, filter policies, inspection engines, boundary transfer appliances, and filter rule-set implementation/testing).
• Coordinate and liaise with accreditation, cybersecurity, testing, and sustainment stakeholders, security authorizing officials, and validation authorities, representing program equities to service cross-domain offices, NCDSMO, and enterprise forums.
• Manage, design, and enforce network pathway security and boundary security controls (gateways, ports, protocols, services, boundary routing policies, port/protocol access rules, COMSEC, KMI controls, and cryptographic key management procedures).
• Support development, author, and review comprehensive security authorization packages (e.g., cross-domain solution charters, RMF artifacts, test plans, and security assessment documentation).
• Ensure all integration and implementation efforts and boundary protection mechanisms align with operational timelines, deployed-force requirements, and denied, disrupted, intermittent, and limited communications constraints, remaining operable, resilient, and compliant in austere, disconnected, and contested tactical operating environments.

Minimum Qualifications

• Bachelor’s degree and at least 5 years of related experience configuring, deploying, maintaining, and sustaining cross-domain solution technology (e.g., enterprise guards, tactical/small-form-factor transfer devices, high-assurance cross-domain appliances, transfer filters, inspection rule sets, and filter rule-set configuration/testing). An additional 2 years of experience may be substituted in lieu of degree.
• Deep and comprehensive technical understanding of NSA Raise the Bar standards, NCDSMO validation processes, federal high-assurance cross- domain security standards, risk management frameworks, or direct accreditation experience.
• Multi-enclave security architecture design experience, including data movement, data flow boundary protection, security sanitization, deep content sanitization, and system-boundary delineation.
• Technical network security capabilities and expertise covering gateways, ports, protocols, services, network boundary defense, secure gateway administration, approved ports/protocols management, COMSEC, KMI implementations, and cryptographic communications security.
• Proven experience architecting and securing automated, high-assurance data-sharing capabilities optimized for resilient operations in DDIL tactical operations and distributed environments.

Preferred Qualifications

• Experience supporting cross-domain solution validation pathways, service- level security validator programs, independent laboratory-based/site-based security assessments to achieve an ATO/IATT authorization/approval.
• Experience authoring or guiding a cross-domain solution ATO/IATT package through to approval.
• Hands-on proficiency with commercial or government high-assurance cross-domain guard appliances and approved product baselines.
• Professional cybersecurity certifications aligned with advanced information assurance technical/management levels (e.g., Certified Information Systems Security Professional).
• Background as a cyberspace officer/engineer, network/data systems administrator, NSA security engineer, service-level cross-domain solution engineer, military, federal civilian, or Defense industry cybersecurity engineering, cyber operations, or secure network engineering.

Clearance Requirements

• Must have a current/active TS/SCI security clearance.

Physical Requirements

• Office work environment with occasional travel to outdoor test and evaluation sites.
• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, meeting spaces, and collaborative work areas.