CSfC Network & Security Architect (DoD Expert)

Sarela Technology Solutions; Fort Belvoir (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech seeks an experienced Network Engineer (SME) to join our I3TS team at Fort Belvoir, VA, supporting a Defense modernization program with Leidos and government leadership to deliver secure, scalable network solutions.

The role emphasizes CSfC architecture, IPsec/SSL VPNs, dynamic routing (BGP/OSPF), and NSA package compliance, with duties spanning design, deployment, and auditing of enterprise networks.

Qualifications

• 12+ years of DoD/DoW network engineering experience
• Active TS/SCI Clearance
• Active DoD 8570.01-M / DoD 8140 IAT Level II/III certs (Security+ CE, CySA+, CASP+, CISSP)
• Experience configuring Cisco IOS-XE/ASR and Aruba IPsec/SSL VPNs
• Palo Alto PAN-OS, Panorama, IDS/IPS experience
• Experience deploying Cisco ISE and/or Aruba ClearPass 802.1X
• X.509 PKI, CA, CRL/OCSP, secure NTP knowledge
• NSA CSfC package registration familiarity
• Ansible automation for network config and cert rotation

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure within CSfC security boundaries
• Design, configure, and maintain CSfC architectures aligned with NSA packages
• Implement IPsec/SSL VPNs with BGP/OSPF routing on Cisco and Aruba devices
• Tune Palo Alto NGFW policies, IDS/IPS signatures, and threat protections
• Manage ISE and ClearPass for 802.1X auth, posture, and RADIUS/TACACS+
• Prepare CSfC compliance artifacts and PMO submission packages
• Ensure CNSA readiness and HSM, PKI integration

Education

Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, MIS

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE / Aruba ClearPass

Job description

SarelaTech seeks an experienced Network Engineer (SME) to join our I3TS team at Fort Belvoir, VA, supporting a Defense modernization program with Leidos and government leadership to deliver secure, scalable network solutions.

The role emphasizes CSfC architecture, IPsec/SSL VPNs, dynamic routing (BGP/OSPF), and NSA package compliance, with duties spanning design, deployment, and auditing of enterprise networks.