CSfC Systems Engineer & Architect — PKI, HSMs, DoD Infra

Sarela Technology Solutions LLC

Fort Belvoir, Northern (VA, KY)

Hybrid

USD 150,000 - 180,000

Full time

9 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking a Systems Engineer SME to support a critical DTRA modernization program. Work with Leidos and government leadership to drive innovation and efficiency within the I3TS portfolio, focusing on CSfC infrastructure, PKI/HSM, and hardened platforms.

The role requires extensive DoD experience, active TS/SCI clearance, and baseline DoD certifications; you will deploy multi-layer CSfC architectures, manage PKI infrastructures, and ensure compliance with DISA STIGs and ATO

Qualifications

Bachelor's degree or higher in CS/IT/Engineering with 12–15 years of prior relevant DoD/DoW experience.
Active TS/SCI Clearance is required.
DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification.
Experience drafting CSfC KMPs and CMPs for NSA CSfC PMO approval.
Proficiency with PowerShell, Bash, and Ansible for automation and remediation.

Responsibilities

Architect, deploy, and maintain CSfC infrastructure in Black/Gray/Red networks.
Design and maintain CSfC architectures aligned with NSA DAR and MA packages.
Manage CA, OCSP, and HSM-backed key protection per CSfC requirements.
Build VM and storage fabrics with vSphere/ESXi or AHV and vSAN; implement DR pipelines.
Administer hardened Windows Server and RHEL systems; enforce STIGs and patching.
Centralize Syslog/audit logging for SIEM ingestion across devices and OSes.
Automate OS deployment and gold image pipelines via SCCM for EUDs.