CSfC Network Engineer | TS/SCI, NSA Suite B Expert

Po'okela; Honolulu (HI); Presencial; USD 144.000 - 176.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401K plan with company match

Medical and dental insurance

Tuition reimbursement

Paid time off

11 paid holidays

Descripción de la vacante

Bering-Alaka`ina Holdings, LLC seeks a skilled CSfC Network Engineer to deliver IT support in Honolulu, Hawai`i. You will configure and sustain CSfC enclaves, manage VPNs, PKI, HSMs, and certificate services while hardening NGFWs and network devices.

The role requires NSA CSfC architecture expertise, DoD 8140 IAT III credentials, and hands-on experience with multi-vendor firewalls and dynamic routing. On-call rotation applies.

Formación

• Three-plus years managing double-tunnel IPsec CSfC architectures.
• Experience with NSA CSfC registrations and waivers.
• Strong routing (BGP/OSPF) and network security experience.

Responsabilidades

• Configure and maintain CSfC enclaves per NSA packages.
• Manage VPN tunnels, PKI components, and HSMs.
• Harden NGFWs, routers, switches and certificate services.
• Perform STIG reviews and remediation with RMF controls.
• Develop SOPs, topology diagrams, and disaster recovery runbooks.
• Provide Tier II/III escalation support during outages.

Conocimientos

IPsec CSfC

Suite B CNSA

PKI/CA

Nessus/ACAS

Palo Alto Fortinet Firepower

Python Bash Ansible

BGP OSPF

On-call support

Educación

Masters/PhD in CS/IT/Cybersecurity

DoD 8140 IAT III certs

CCNP Enterprise/Security or CCNA

NSA CSfC training

Herramientas

Palo Alto

Fortinet

Cisco Firepower

F5 BIG-IP

Elastic Cribl

Descripción del empleo

Bering-Alaka`ina Holdings, LLC seeks a skilled CSfC Network Engineer to deliver IT support in Honolulu, Hawai`i. You will configure and sustain CSfC enclaves, manage VPNs, PKI, HSMs, and certificate services while hardening NGFWs and network devices.

The role requires NSA CSfC architecture expertise, DoD 8140 IAT III credentials, and hands-on experience with multi-vendor firewalls and dynamic routing. On-call rotation applies.