CSSP Engineer/Architect, SME

Feditc,-LL; Indianapolis (IN); On-site; USD 150,000 - 190,000; Full time

Job summary

FEDITC, LLC is seeking a CSSP Engineer/Architect, SME to lead cybersecurity compliance, RMF accreditation, and continuous monitoring for the DFAS CCE. This role oversees A&A, FISMA compliance, audit readiness, vulnerability management, and security documentation to maintain Authority to Operate.

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Qualifications

• 10+ years cybersecurity engineering experience.
• CISSP-ISSEP certification demonstrating security engineering expertise.
• Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools.
• Experience with SIEM solutions (ArcSight, Splunk).
• Network forensics and traffic analysis expertise.
• Experience with CSSP accreditation processes.
• Knowledge of JFHQ DODIN and Cyber Command reporting requirements.
• Experience engineering solutions for NIPRNet, SIPRNet, and JWICS.

Responsibilities

• Lead CSSP engineering team for security infrastructure technologies.
• Engineer network perimeter defense appliances and SIEM toolsets.
• Operate CSSP-specific toolsets for unclassified and classified enclaves.
• Develop and maintain Cybersecurity Plan (due 30 days after start).
• Ensure 100% corrective action plans reported and completed for weaknesses identified.
• Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements.
• Perform security review of new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance.
• Ensure 100% STIG compliance for new deployments.
• Operate and maintain CSSP accreditation achieving 3-year accreditation.
• Align all technologies with Zero Trust architecture where applicable.

Skills

Cybersecurity engineering

RMF accreditation

A&A / RMF processes

CISSP-ISSEP

DOD/Cyber reporting

Education

Bachelor's degree in CS/Engineering/IT

Tools

ArcSight

Splunk

ACAS

IDS/IPS

Penetration tools

Job description

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

We are looking for a CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Responsibilities

• Lead CSSP engineering team for security infrastructure technologies
• Engineer network perimeter defense appliances and SIEM toolsets
• Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
• Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
• Ensure 100% corrective action plans reported and completed for weaknesses identified
• Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
• Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
• Ensure 100% STIG compliance for new deployments
• Operate and maintain CSSP accreditation achieving 3-year accreditation
• Align all technologies with Zero Trust architecture where applicable

Experience/Skills:

• 10+ years cybersecurity engineering experience
• CISSP-ISSEP certification demonstrating security engineering expertise
• Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
• Experience with SIEM solutions (ArcSight, Splunk)
• Network forensics and traffic analysis expertise
• Experience with CSSP accreditation processes
• Knowledge of JFHQ DODIN and Cyber Command reporting requirements
• Experience engineering solutions for NIPRNet, SIPRNet, and JWICS

Preferred Qualifications:

• GIAC certifications (GPEN, GWAPT, GCIH)
• Experience with DFAS CSSP operations
• Prior DoD Cyber Command experience
• Penetration testing certifications (OSCP, CEH)
• Experience with DoD CSSP Evaluators Scoring Metrics
• Zero Trust architecture implementation experience
• Cloud security engineering experience

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CISSP-ISSEP or equivalent

Clearance:

• Active Top Secret/SCI clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Federal IT Consulting (FEDITC)’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval, or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.