CSfC Systems Engineer: Defense IT Architect & PKI Expert

Career Listings; Fort Belvoir (VA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking an experienced Systems Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, supporting a major digital modernization program for the Defense Threat Reduction Agency. You will architect, deploy, and maintain CSfC infrastructure, PKI/HSM, and hardened OS platforms, ensuring ATO compliance and robust logging and SIEM integration.

The role requires DoD-focused systems engineering expertise, TS/SCI clearance, and hands-on experience with

Qualifications

• Active TS/SCI clearance is required.
• 12+ years of progressive systems engineering exp in DoD/DoW, federal, or defense contractor environments.
• DoD 8570-M / DoD 8140 IAT II/III baseline certification or equivalent.
• Experience drafting CSfC Key Management Plans (KMPs) and CMPs for NSA CSfC PMO approval.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure in Black/Gray/Red networks.
• Design and configure multi-layer CSfC architectures per NSA DAR/MA packages.
• Manage CA, OCSP responders, and hardware-backed key protection via HSMs.
• Build and optimize VMware/Nutanix compute/storage fabrics with vSAN.
• Deploy hardened Windows Server AD, DNS, and GPO; manage RHEL systems.
• Establish centralized Syslog and SIEM ingestion for monitoring.

Skills

PowerShell

Bash

Ansible

Security clearance

Certificate deployment

Syslog/ SIEM

Education

Bachelor's degree or higher in Computer Science or related STEM field

Tools

VMware vSphere/ESXi

Nutanix AHV

VMware vSAN

Microsoft SCCM / MCM

RHEL

Windows Server

SCCM automation

PKI & HSM

DISA STIG compliance

Job description

SarelaTech is seeking an experienced Systems Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, supporting a major digital modernization program for the Defense Threat Reduction Agency. You will architect, deploy, and maintain CSfC infrastructure, PKI/HSM, and hardened OS platforms, ensuring ATO compliance and robust logging and SIEM integration.

The role requires DoD-focused systems engineering expertise, TS/SCI clearance, and hands-on experience with