CSfC Architect: Secure Classified Network Solutions Lead

Network Designs; McLean (VA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) retirement plan with matching

Paid leave and holidays

Professional development

Job summary

Network Designs, Inc. (NDi) is seeking a CSfC Architect to design and implement NSA-approved CSfC systems for classified environments. You will lead secure network architectures, decrypt/encrypt strategies, and vendor conversations to meet mission requirements for government clients.

The role requires deep cryptographic knowledge, VPN/IPsec/TLS expertise, PKI, and RMF/NIST familiarity, with remote work currently in effect and travel up to 25%. Previous NSA/DoD collaboration is a plus.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Electrical Engineering, or related field; advanced degree preferred.
• 7+ years of IT experience focusing on security architecture, network security, or cryptography.
• Expertise in CSfC solutions or secure network architectures.
• Knowledge of encryption technologies, VPNs, PKI, and secure mobile solutions.
• Experience with NSA CSfC program components (e.g., Capability Packages).
• Familiarity with Federal and DoD security policies (NIST, FIPS, RMF).
• Experience obtaining certifications and ATO for classified environments.

Responsibilities

• Design secure, NSA-approved CSfC solutions using commercial tech.
• Develop layered security architectures with encryption, VPNs, PKI, mobile tech.
• Ensure designs align with DoD/NSA/government standards.
• Engage vendors independently to discuss new technologies.

Skills

CSfC architecture

Security architecture

NSA CSfC

Encryption and cryptography

VPNs (IPsec, TLS)

PKI and key management

NIST/RMF/DoD

Vendors engagement

Education

Bachelor's degree in CS/InfoSec/EE

Advanced degree preferred

Tools

IPsec

TLS

PKI

Job description

Network Designs, Inc. (NDi) is seeking a CSfC Architect to design and implement NSA-approved CSfC systems for classified environments. You will lead secure network architectures, decrypt/encrypt strategies, and vendor conversations to meet mission requirements for government clients.

The role requires deep cryptographic knowledge, VPN/IPsec/TLS expertise, PKI, and RMF/NIST familiarity, with remote work currently in effect and travel up to 25%. Previous NSA/DoD collaboration is a plus.