CSfC Network Architect for DoD/NSA Compliance

Talentify; Fort Belvoir (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

ValidaTek seeks an experienced Network Engineer (SME) to support the DTRA program at Fort Belvoir, VA. You’ll work with government leadership to advance modernization across CSfC-based networks and secure multi-layer architectures.

This role requires active TS/SCI clearance, DoD/DoW network experience, and hands-on expertise with Cisco/Aruba VPNs, Palo Alto firewalls, and 802.1X. Join a fast-moving team delivering mission-critical IT services.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, MIS, or related STEM field; 12–15 years of relevant experience
• 12+ years of progressive network engineering experience in DoD/DoW, federal, or defense contractor environments
• Active TS/SCI Clearance
• Active 8570.01-M/8140 IAT Level II/III baseline certification (e.g., Security+ CE, CySA+, CASP+, CISSP)
• One or more of: Cisco CCNA/CCNP, Aruba ACSA/ACSP
• Experience configuring Cisco IOS-XE/ASR and Aruba IPsec/SSL VPNs including IKEv2
• Experience with Palo Alto PAN-OS, Panorama, IDS/IPS
• Experience with Cisco ISE and Aruba ClearPass 802.1X deployment
• X.509 certificates, CA hierarchy, CRLs, OCSP, secure NTP
• NSA CSfC capabilities (Mobile Access, Multi-Site, Campus WLAN)
• Familiarity with CNSA suites and HSMs
• Ansible automation for network configuration and cert rotation

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure within black/gray/red networks
• Design, configure, and maintain CSfC architectures aligned with NSA capability packages
• Implement routing protocols (BGP/OSPF) with multi VPN tunnels across Cisco/Aruba
• Configure remote access SSL VPNs and ensure end-to-end traffic separation
• Audit Palo Alto NGFW policies, App-ID, User-ID, URL filtering and IDS/IPS signatures
• Manage ISE and ClearPass policy managers for 802.1X access control
• Integrate PKI components including certificates, CA hierarchy, OCSP validation
• Prepare CSfC compliance artifacts and PMO submission packages
• Maintain NDA, security posture, and compliance documentation
• Coordinate with government leadership to drive innovation and efficiency

Skills

CSfC networking

BGP/OSPF

Palo Alto firewalls

802.1X authentication

NIAP/NSA CSfC

PKI/OCSP

NTP security

Ansible

Education

Bachelor's degree or higher in CS/IT/Engineering

Active TS/SCI Clearance

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE

Aruba ClearPass

Job description

ValidaTek seeks an experienced Network Engineer (SME) to support the DTRA program at Fort Belvoir, VA. You’ll work with government leadership to advance modernization across CSfC-based networks and secure multi-layer architectures.

This role requires active TS/SCI clearance, DoD/DoW network experience, and hands-on expertise with Cisco/Aruba VPNs, Palo Alto firewalls, and 802.1X. Join a fast-moving team delivering mission-critical IT services.