CSfC Systems Engineer SME: PKI/HSM & HCI Architect

Global Enterprise Services, Llc; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

Global Enterprise Services, Llc is seeking an experienced Systems Engineer SME to support a Defense-focused modernization program. The role centers on CSfC infrastructure, PKI/HSM management, and hardened Windows/RHEL environments to maintain ATO.

The successful candidate will work with Leidos and government leaders, ensuring secure logging, patching, and automated image provisioning, while holding an active TS/SCI clearance.

Qualifications

• DoD/DoW experience required.
• Active TS/SCI Clearance required.
• Active DoD 8570.01-M / DoD 8140 IAT Level II/III cert (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Active Computing Environment cert (e.g., VMware VCP/VCAP, RHCE, Windows Server Hybrid Administrator).
• Experience drafting CSfC KMPs and CMPs for NSA CSfC PMO approval.
• Proficiency with PowerShell, Bash, and Ansible for automation and STIG remediation.
• Experience configuring Syslog daemons and forwarding to enterprise SIEM (Splunk/Elastic).

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure in Black/Gray/Red networks.
• Design CSfC architectures aligned with NSA DAR/MA capabilities.
• Manage CA, OCSP responders, and HSMs per CSfC requirements.
• Build and optimize virtualized compute/storage with VMware/Nutanix/vSAN.
• Deploy hardened Windows Server and RHEL systems.
• Establish centralized Syslog and audit logging for SIEM ingestion.
• Forward cross-domain logs to a centralized SIEM.
• Automate OS deployment and gold image pipelines with SCCM for EUD.
• Apply and validate patching and STIGs across all infra.
• Perform vulnerability scans and remediate to maintain ATO.

Skills

DoD/DoW experience

Active TS/SCI Clearance

PowerShell

Bash

Ansible

VMware vSphere/ESXi

Nutanix AHV

Patching & STIGs

Education

Bachelor's degree in STEM or related field

Tools

VMware vSphere/ESXi

Nutanix AHV

SCCM

Rsyslog/Syslog-ng

Splunk/Elastic SIEM

Job description

Global Enterprise Services, Llc is seeking an experienced Systems Engineer SME to support a Defense-focused modernization program. The role centers on CSfC infrastructure, PKI/HSM management, and hardened Windows/RHEL environments to maintain ATO.

The successful candidate will work with Leidos and government leaders, ensuring secure logging, patching, and automated image provisioning, while holding an active TS/SCI clearance.