Network Engineer

Bering-Alaka'ina Holdings, LLC; Hawaii; Sur place; USD 144 000 - 176 000; Plein temps

Avantages offerts par ce poste

401K plan with company match

Medical coverage

Dental coverage

Disability insurance

Life insurance

Tuition reimbursement

Paid time off

11 paid holidays

Résumé du poste

Bering-Alaka’ina Holdings, LLC is seeking a CSfC Network Engineer to deliver IT support in Honolulu, Hawai'i. The role focuses on configuring CSfC enclaves, securing VPNs, hardening devices, and managing PKI/HSMs while coordinating with cybersecurity teams and incident response.

Required are advanced NSA CSfC training, DoD 8140 IAT III, and expert routing/security experience. The position requires on-site work with U.S. citizenship and active TS/SCI clearance.

Qualifications

• Accredited masters or PhD in a related technical field.
• DoD 8140 Baseline IAT III certs (SecurityX/CASP, CCNA/CCNP/CCSP).
• Professional-level network certs (CCNP Enterprise or Security, etc.).
• Formal NSA CSfC, Suite B/CNSA training and PKI/CA administration.

Responsabilités

• Configure and maintain CSfC enclaves per NSA packages.
• Manage VPN tunnels, crypto algorithms, and certs.
• Harden NGFWs, routers, switches, and certificate systems.
• Operate PKI/CRLs/OCSP and HSMs, monitor networks and performance.
• Support STIG reviews, POA&M remediation, and disaster recovery runs.
• Produce SOPs and network diagrams; assist outages and incidents.

Connaissances

IPsec double-tunnel

Suite B/CNSA

BGP/Ospf/EIGRP

PKI/CA administration

Scripting (Python/Bash/Ansible)

Network monitoring & troubleshooting

Formation

Masters or PhD in CS/IT/Cybersecurity/Software Eng

DoD 8140 IAT III baseline certs

CCNP Enterprise/Security or CCSP

NSA CSfC architectures & PKI/CA training

Outils

Cisco

Aruba

Juniper

Palo Alto / Fortinet / Cisco Firepower

F5 BIG-IP SSL Orchestrator

Description du poste

Bering-Alaka’ina Holdings, LLC is looking for a skilled Commercial Solutions for Classified (CSfC) Network Engineer to provide Information Technology (IT support services) to a customer in Honolulu, Hawai'i.

DESCRIPTION OF RESPONSIBILITIES:

• Configure, deploy, and maintain multi-layered CSfC secure enclaves conforming strictly to NSA Capability Packages (e.g., MSC, MA, and CP).
• Maintain and optimize Inner and Outer Virtual Private Network (VPN) tunnels utilizing diverse IPsec implementations and Suite B / CNSA cryptographic algorithms.
• Configure and harden enterprise networking hardware, including next-generation firewalls (NGFW), enterprise routers, switches, and certificate management systems.
• Manage and maintain Public Key Infrastructure (PKI) components, certificate revocation lists (CRLs), Online Certificate Status Protocol (OCSP) responders, and hardware security modules (HSMs).
• Conduct continuous network monitoring, traffic analysis, performance tuning, and rapid troubleshooting of routing protocol anomalies (BGP, OSPF, EIGRP) and cryptographic failures.
• Partner with cybersecurity compliance and auditing teams to conduct Security Technical Implementation Guide (STIG) compliance reviews and remediate Plan of Action and Milestones (POA&M) findings.
• Author and update standard operating procedures (SOPs), network topology diagrams, continuous monitoring plans, and disaster recovery runbooks.
• Provide escalation support to Tier II/III technicians during operational outages or security incident response events.
• Other duties as assigned by Supervisor.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

• Accredited Masters or PHD in Computer Science, Information Technology, Data Science, Cybersecurity, Software Engineering or a related technical discipline.
• DoD Directive 8140 Baseline: IAT Level III (Advanced) = CompTIA SecurityX/CASP, CCNA, CCNP Security, CCSP, GCED, CGIA, GCLD, GDSA, GFACT.
• Computing Environment / Vendor Certifications: Professional-Level Network Certification = Cisco Certified Network Professional (CCNP Enterprise or Security), Aruba Certified Design/Mobility Professional, or Juniper JNCIP.
• Specialized Training: Cryptography & Security = Formal training in NSA CSfC architectures, Suite B / CNSA standards, and PKI/CA administration.

REQUIRED SKILLS AND EXPERIENCE:

• Three plus (3+) years directly administering double-tunnel IPsec architectures, Suite B/CNSA cipher suites, Certificate Authorities, and Key Management Systems. Direct experience authoring and submitting NSA CSfC registration packages and deviation waivers.
• Seven plus (7+) years hands-on experience configuring Cisco, Aruba, or Juniper switches, routers, and IPsec aggregators. Deep expertise in dynamic routing (BGP, OSPF), VXLAN, MPLS, and high-availability gateway protocols.
• Advanced configuration of Palo Alto Networks, Fortinet, or Cisco Firepower firewalls, IDS/IPS, and web proxies. Hands-on experience with F5 BIG-IP / SSL Orchestrator and hardware load balancers.
• Proven experience applying DISA STIGs, SCAP tools, and resolving vulnerability scans (Nessus/ACAS). Familiarity with RMF (Risk Management Framework) lifecycle controls (NIST SP 800-37 / 800-53).
• Advanced packet analysis using Wireshark, tcpdump, and network performance monitoring platforms (Elastic, Cribl). Scripting experience (Python, Bash, or Ansible) for network automation and configuration verification.
• Primary day position with required participation in on-call operational rotation to customer escalations.

REQUIRED CITIZENSHIP AND CLEARANCE:

• Must be a U.S. Citizen
• Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).

COMPENSATION DETAILS:

• $160,000.00
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kīkaha Solutions, LLC;and Pololei Solutions, LLC.

For additional information, please visit www.beringalakaina.com

#LI-JS1

#ClearanceJobs