CSfC Network Architect for DoD Secure Infra

Career Listings; Springfield (VA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking an experienced Network Engineer (SME) to support a Defense Threat Reduction Agency program at Fort Belvoir, VA. The role collaborates with Leidos and government leadership to drive innovation, growth, and efficiencies within the I3TS portfolio.

The candidate will architect and operate secure CSfC networks, configure BGP/OSPF, manage PKI/OCSP, and ensure NSA CSfC compliance while delivering key engineering artifacts and PMO submissions.

Qualifications

• Active TS/SCI clearance is required.
• DoD/DoW or defense contractor enterprise experience is essential.
• Certificate baselines (Security+, CySA+, CASP+, CISSP) or equivalent.
• Hands-on with CSfC architectures and NSA-related Cap Packages.
• Experience configuring and auditing IPsec/SSL VPNs and routing protocols.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure across multi-layer networks.
• Configure BGP/OSPF and dual IPsec VPN tunnels across Cisco/Aruba devices.
• Author, tune, and audit security policies with Palo Alto and IDS/IPS profiles.
• Manage ISE/ClearPass for 802.1X, posture assessment, and access control.
• Prepare NSA CSfC artifacts and PMO registration packages.

Skills

CSfC architectures

BGP/OSPF routing

IPsec/SSL VPNs

Palo Alto PAN-OS

Cisco ISE / Aruba ClearPass

NSA CSfC PKI/OCSP

802.1X posture assessment

Network security auditing

NTP security hardening

Education

Bachelor's degree or higher in STEM

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers

Palo Alto PAN-OS & Panorama

Cisco ISE / Aruba ClearPass

Ansible

PKI/CA management tooling

Job description

SarelaTech is seeking an experienced Network Engineer (SME) to support a Defense Threat Reduction Agency program at Fort Belvoir, VA. The role collaborates with Leidos and government leadership to drive innovation, growth, and efficiencies within the I3TS portfolio.

The candidate will architect and operate secure CSfC networks, configure BGP/OSPF, manage PKI/OCSP, and ensure NSA CSfC compliance while delivering key engineering artifacts and PMO submissions.