CSfC Systems Engineer: PKI/HSM, HCI & DoD Compliance

Career Listings; Fort Belvoir (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking an experienced Systems Engineer (SME) to support an extensive digital modernization program for the Defense Threat Reduction Agency. You will work with Leidos and government leaders to drive innovation, growth, and efficiencies within the I3TS portfolio.

The role focuses on CSfC infrastructure, PKI/HSM, advanced virtualization, and robust patching and STIG compliance to sustain ATO and assist automated gold-image provisioning via SCCM. Fort Belvoir, VA location is included.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, MIS, or related STEM field with 12–15 years of experience (or Master with 10–13 years).
• 12+ years of progressive systems engineering in DoD/DoW, federal, or defense contractor environments.
• Active TS/SCI Clearance and DoD 8570.01-M / DoD 8140 IAT Level II/III baseline certs (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Experience drafting CSfC Key Management Plans (KMPs) and CMPs for NSA CSfC PMO approvals.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure in Black/Gray/Red networks.
• Design, configure, and maintain multi-layer CSfC architectures per NSA DAR/MA packages.
• Deploy, manage CA/OCSP responders and HSM-based key protection per CSfC requirements.
• Build and optimize virtualized compute/storage using VMware vSphere/ESXi or Nutanix AHV/vSAN.
• Configure hardened Windows Server (AD, DNS, Group Policy) and RHEL systems.
• Establish centralized Syslog and SIEM ingestion across devices and OSes.
• Forward logs to a centralized SIEM and support DoW cross-domain data sharing.
• Automate OS deployment and gold image pipelines via SCCM for CSfC End User Devices.
• Apply patches and STIGs; perform vulnerability scans to maintain ATO.

Skills

Active TS/SCI Clearance

CSfC experience

IAT II/III certs

KMP/CMP planning

Patching/STIGs

Education

Bachelor's degree or higher in CS/IT/Engineering

Tools

VMware vSphere/ESXi

Nutanix AHV/vSAN

SCCM / MCM

PowerShell

Bash

Ansible

RHEL / Windows Server

Splunk / Elastic SIEM

Job description

SarelaTech is seeking an experienced Systems Engineer (SME) to support an extensive digital modernization program for the Defense Threat Reduction Agency. You will work with Leidos and government leaders to drive innovation, growth, and efficiencies within the I3TS portfolio.

The role focuses on CSfC infrastructure, PKI/HSM, advanced virtualization, and robust patching and STIG compliance to sustain ATO and assist automated gold-image provisioning via SCCM. Fort Belvoir, VA location is included.