DDIL Infrastructure Architect - Edge ICAM & Zero Trust

Mantis Security Corporation; Reston (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Mantis Security Corporation seeks a Denied, Disrupted, Intermittent, and Limited (DDIL) SME to guide strategy and architecture for secure mission services operating with constrained connectivity. The role sits at the intersection of tactical communications, systems engineering, and advanced cybersecurity, emphasizing Zero Trust and local autonomy.

The SME will determine what must operate locally, how data can be cached, and how systems reconnect safely, while communicating complex tradeoffs to

Qualifications

• Clearance TS/SCI, ability to obtain CI polygraph.
• Demonstrated expertise designing, evaluating, or fielding systems for denied/limited connectivity.
• Experience developing mission/enterprise architectures for disconnected operation.

Responsibilities

• Develop DDIL strategies, architectures, and roadmaps for mission apps and security services.
• Define operational scenarios under constrained connectivity and degraded service.
• Translate scenarios into local autonomy, bandwidth, latency, and recovery requirements.
• Architect local identity and attribute services with caching of security information.
• Guide prototypes and demonstrations that validate assumptions under network impairments.
• Define acceptance criteria and support mission continuity and recovery amid connectivity loss.

Skills

TS/SCI clearance

DDIL systems design

Mission architecture

Stakeholder liaison

Test & evaluation

Tools

AWS

Kubernetes

OpenShift

PKI

Job description

Mantis Security Corporation seeks a Denied, Disrupted, Intermittent, and Limited (DDIL) SME to guide strategy and architecture for secure mission services operating with constrained connectivity. The role sits at the intersection of tactical communications, systems engineering, and advanced cybersecurity, emphasizing Zero Trust and local autonomy.

The SME will determine what must operate locally, how data can be cached, and how systems reconnect safely, while communicating complex tradeoffs to