CSfC Systems Engineer SME - PKI, HSM, VMWare Expert

Leidos LLC; Fort Belvoir (VA); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking an experienced Systems Engineer (SME) to join our I3TS team, supporting a digital modernization program for the Defense Threat Reduction Agency (DTRA). The role focuses on CSfC architectures, PKI/HSM operations, and hardened Windows and Linux platforms, with emphasis on secure logging, patching, and continuous monitoring to sustain ATO.

You will design and maintain virtualization fabrics (VMware/Nutanix), implement DR pipelines, and ensure compliance with DISA STIGs while

Qualifications

• 12+ years of progressive systems engineering experience within DoD/DoW or federal defense environments.
• Active TS/SCI Clearance.
• DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certs (e.g., Security+ CE, CySA+, CASP+, or CISSP).
• Experience drafting CSfC Key Management Plans (KMPs) and Continuous Monitoring Plans (CMPs).
• Proficiency with PowerShell, Bash, and Ansible for automated STIG remediation and deployment.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure.
• Design and maintain multi-layer CSfC architectures aligned with NSA DAR/MA packages.
• Build and manage CA/OCSP and HSM-based key protection per CSfC requirements.
• Deploy, configure, and administer hardened Windows Server and RHEL systems.

Skills

Systems engineering

CSfC

VMware vSphere/ESXi

Nutanix AHV

Security certifications

PowerShell/Bash/Ansible

DISA STIG compliance

DoD/DoW experience

SIEM/logging

Education

Bachelor's degree or higher in CS/IT/Engineering

Master's degree

Doctorate (optional)

Tools

VMware vSphere/ESXi

Nutanix AHV

SCCM / MCM

Windows Server

Red Hat Enterprise Linux (RHEL)

Syslog / SIEM tools

KB/PKI/HSM management

Job description

Leidos is seeking an experienced Systems Engineer (SME) to join our I3TS team, supporting a digital modernization program for the Defense Threat Reduction Agency (DTRA). The role focuses on CSfC architectures, PKI/HSM operations, and hardened Windows and Linux platforms, with emphasis on secure logging, patching, and continuous monitoring to sustain ATO.

You will design and maintain virtualization fabrics (VMware/Nutanix), implement DR pipelines, and ensure compliance with DISA STIGs while