CSfC Systems Engineer SME: PKI, HSM & SecOps

Defense Engineering Inc.; Manassas (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Defense Engineering, Inc. seeks an experienced Systems Engineer SME to support the CSfC program for DTRA, partnering with Leidos and government leadership.

Responsibilities include architecting PKI/HSM, maintaining HCI, and enforcing CSfC security standards across Windows and RHEL platforms. The role emphasizes building hardened infrastructure, implementing robust backup/DR, and enabling automated OS deployment and patching, while sustaining Authorization to Operate (ATO) and log aggregation for

Qualifications

• 12-15 years of prior relevant experience in DoD/DoW or defense contractor environments.
• Active TS/SCI clearance is required.
• DoD 8570.01-M / DoD 8140 IAT Level II/III certs (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Experience drafting CSfC Key Management Plans (KMPs) and CMPs for NSA approval.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure within Black/Gray/Red networks for CSfC operations.
• Design and configure multi-layer CSfC architectures aligned with NSA Data-at-Rest and MA Capabilities.
• Manage CA, OCSP responders, and HSMs with CSfC key management requirements.
• Build and optimize virtualized compute/storage fabrics using VMware vSphere/ESXi or Nutanix AHV with vSAN.
• Implement Windows Server AD/DNS/GP and RHEL systems; enforce STIGs and patching across all systems.
• Establish centralized Syslog/audit logging for SIEM ingestion and monitoring.

Skills

Systems engineering

DoD/DoW

Cybersecurity awareness

Education

Bachelor’s degree or higher in Computer Science, IT, Engineering, or related STEM field

Tools

VMware vSphere/ESXi

Nutanix AHV with vSAN

SCCM/Microsoft Configuration Manager

Windows Server

RHEL

PowerShell

Bash

Ansible

Syslog (Rsyslog/Syslog-ng)

SIEM (Splunk/Elastic)

CSfC/PKI/HSM

Job description

Defense Engineering, Inc. seeks an experienced Systems Engineer SME to support the CSfC program for DTRA, partnering with Leidos and government leadership.

Responsibilities include architecting PKI/HSM, maintaining HCI, and enforcing CSfC security standards across Windows and RHEL platforms. The role emphasizes building hardened infrastructure, implementing robust backup/DR, and enabling automated OS deployment and patching, while sustaining Authorization to Operate (ATO) and log aggregation for