CSfC Security Architect — NSA‑Aligned, Remote Role

Network Designs, Inc.; United States Virgin Islands; On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement matching

Paid leave & holidays

Life and disability insurance

Professional development & education

Job summary

Network Designs, Inc. (NDi) is seeking a CSfC Architect to design, develop, and implement Commercial Solutions for Classified systems in alignment with NSA guidelines.

You will lead integration of commercial technologies into classified environments for government and defense clients, focusing on secure communications and cryptographic solutions. The role requires deep expertise in CSfC, encryption, VPNs, PKI, and RMF/NIST guidelines, with the ability to work with vendors and federal

Qualifications

• Bachelor's degree in Computer Science, Information Security, Electrical Engineering, or related field. Advanced degree preferred.
• 7+ years of experience in IT, with a focus on security architecture, network security, or cryptography.
• Expertise in designing and implementing CSfC solutions or related secure network architectures.
• In-depth understanding of encryption technologies, VPNs (IPsec, TLS), PKI, key management, and secure mobile solutions.
• Familiarity with NSA's CSfC program, and its components such as Capability Packages (CPs).
• Knowledge of Federal and DoD security policies, including NIST guidelines, FIPS, and RMF.
• Experience obtaining certifications and ATO for classified environments.

Responsibilities

• Design secure, NSA-approved CSfC solutions to protect classified information at rest and in transit using commercial technologies.
• Develop layered security architectures using encryption, VPNs, PKI, mobile, and wireless technologies in compliance with CSfC requirements.
• Ensure solution designs align with DoD, NSA, and other government agency security policies and standards.
• Independently engage vendors to discuss new technologies and solution requirements.
• Lead the deployment and integration of CSfC components such as IPsec, TLS, and wireless protection solutions into client systems.
• Work closely with cross-functional teams to ensure seamless integration with existing infrastructures, networks, and systems.
• Create detailed documentation and guidelines for the installation and configuration of CSfC-approved products.
• Ensure systems and architectures meet NSA guidelines for CSfC.
• Collaborate with the NSA, DoD, and other relevant agencies to gain certifications for CSfC solutions.
• Provide support in obtaining necessary approvals and Authority to Operate (ATO) for CSfC deployments.
• Conduct vulnerability assessments and risk analysis to ensure the robustness of the proposed architectures.
• Ensure continuous security monitoring and improvement of CSfC deployments.
• Provide incident response support and security posture evaluations.
• Engage government and commercial technical POCs in the development of custom enterprise solutions.
• Advise clients on best practices for CSfC implementation.
• Interface with government clients, contractors, and internal teams to communicate architectures and plans.
• Provide regular updates to leadership on milestones, risks, and performance.
• Experience architecting enterprise networks

Skills

Security architecture

Network security

Cryptography

CSfC

Encryption technologies

VPNs

PKI

Key management

Communication skills

Education

Bachelor's degree in Computer Science, Information Security, Electrical Engineering, or related field

Advanced degree preferred

Tools

CSfC solutions

NSA CSfC frameworks

IPsec

TLS

Job description

Network Designs, Inc. (NDi) is seeking a CSfC Architect to design, develop, and implement Commercial Solutions for Classified systems in alignment with NSA guidelines.

You will lead integration of commercial technologies into classified environments for government and defense clients, focusing on secure communications and cryptographic solutions. The role requires deep expertise in CSfC, encryption, VPNs, PKI, and RMF/NIST guidelines, with the ability to work with vendors and federal