CSfC Systems Engineer SME: PKI, HSM & Infra Architect

Leidos; Fort Belvoir (VA); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking an experienced Systems Engineer SME to support the I3TS program for DTRA. You will architect CSfC, manage PKI/HSMs, and oversee VMware/Nutanix infrastructure with vSAN, while enforcing STIGs and supporting secure logging and SIEM integration.

The role requires an active TS/SCI clearance and DoD 8570 baseline certifications, with extensive DoD/DoW experience and a focus on cyber-hardened environments. Fort Belvoir, VA area is the posting location.

Qualifications

• 12+ years of progressive systems engineering in DoD/DoW or defense environments.
• Active TS/SCI Clearance with DoD 8570.01-M / DoD 8140 IAT Level II/III.
• Experience drafting CSfC KMPs/CMPs for NSA approval.
• Proficiency with automated configuration and patching using PowerShell, Bash, Ansible.
• Experience with CSfC and PKI/HSM architectures and secure logging.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure in secure networks.
• Manage PKI/HSMs, CA, OCSP responders for CSfC needs.
• Build and optimize VMware/Nutanix hyperconverged environments with vSAN.
• Implement backup, DR, and air-gapped pipelines.
• Administer Windows Server and RHEL across domains; enforce STIGs.
• Centralize Syslog/audit logging; support SIEM ingestion.
• Develop OS deployment pipelines and gold images via SCCM/MCM.

Skills

Active TS/SCI Clearance

PowerShell

Bash

Ansible

CSfC Key Management

SCIM/PKI/HSM

SIEM (Splunk/Elastic)

VMware vSphere/ESXi

Nutanix AHV

vSAN

SCCM/MCM

Windows Server Admin

RHEL Admin

Education

Bachelor's degree or higher in Computer Science, IT, or related STEM field

Tools

VMware vSphere/ESXi

Nutanix AHV

vSAN

SCCM/MCM

Microsoft Configuration Manager

Active Directory

DNS

Group Policy

RSyslog/Syslog-ng

Splunk

Elastic

PowerShell

Bash

Ansible

Job description

Leidos is seeking an experienced Systems Engineer SME to support the I3TS program for DTRA. You will architect CSfC, manage PKI/HSMs, and oversee VMware/Nutanix infrastructure with vSAN, while enforcing STIGs and supporting secure logging and SIEM integration.

The role requires an active TS/SCI clearance and DoD 8570 baseline certifications, with extensive DoD/DoW experience and a focus on cyber-hardened environments. Fort Belvoir, VA area is the posting location.