CSfC Network Engineer – TS/SCI | NSA Suite B Expert

Bering-Alaka'ina Holdings, LLC; Hawaii; On-site; USD 144,000 - 176,000; Full time

Benefits offered by this job

401K plan with company match

Medical coverage

Dental coverage

Disability insurance

Life insurance

Tuition reimbursement

Paid time off

11 paid holidays

Job summary

Bering-Alaka’ina Holdings, LLC is seeking a CSfC Network Engineer to deliver IT support in Honolulu, Hawai'i. The role focuses on configuring CSfC enclaves, securing VPNs, hardening devices, and managing PKI/HSMs while coordinating with cybersecurity teams and incident response.

Required are advanced NSA CSfC training, DoD 8140 IAT III, and expert routing/security experience. The position requires on-site work with U.S. citizenship and active TS/SCI clearance.

Qualifications

• Accredited masters or PhD in a related technical field.
• DoD 8140 Baseline IAT III certs (SecurityX/CASP, CCNA/CCNP/CCSP).
• Professional-level network certs (CCNP Enterprise or Security, etc.).
• Formal NSA CSfC, Suite B/CNSA training and PKI/CA administration.

Responsibilities

• Configure and maintain CSfC enclaves per NSA packages.
• Manage VPN tunnels, crypto algorithms, and certs.
• Harden NGFWs, routers, switches, and certificate systems.
• Operate PKI/CRLs/OCSP and HSMs, monitor networks and performance.
• Support STIG reviews, POA&M remediation, and disaster recovery runs.
• Produce SOPs and network diagrams; assist outages and incidents.

Skills

IPsec double-tunnel

Suite B/CNSA

BGP/Ospf/EIGRP

PKI/CA administration

Scripting (Python/Bash/Ansible)

Network monitoring & troubleshooting

Education

Masters or PhD in CS/IT/Cybersecurity/Software Eng

DoD 8140 IAT III baseline certs

CCNP Enterprise/Security or CCSP

NSA CSfC architectures & PKI/CA training

Tools

Cisco

Aruba

Juniper

Palo Alto / Fortinet / Cisco Firepower

F5 BIG-IP SSL Orchestrator

Job description

Bering-Alaka’ina Holdings, LLC is seeking a CSfC Network Engineer to deliver IT support in Honolulu, Hawai'i. The role focuses on configuring CSfC enclaves, securing VPNs, hardening devices, and managing PKI/HSMs while coordinating with cybersecurity teams and incident response.

Required are advanced NSA CSfC training, DoD 8140 IAT III, and expert routing/security experience. The position requires on-site work with U.S. citizenship and active TS/SCI clearance.