Network Engineer

Bering-Alaka'ina Holdings, LLC; Honolulu (HI); On-site; USD 144,000 - 176,000; Full time

Benefits offered by this job

401K with company match

Health, dental & disability insurance

Tuition reimbursement

Paid time off

11 paid holidays

Job summary

Bering-Alaka’ina Holdings, LLC seeks a CSfC Network Engineer to support IT services for a Honolulu customer. You will configure secure CSfC enclaves, maintain IPsec VPNs, and harden NGFWs and core network devices. The role requires active TS/SCI clearance and U.S. citizenship.

Responsibilities include PKI, STIG compliance coordination, SOP creation, and on-call support. Masters or PhD and NSA CSfC training are required.

Qualifications

• Accredited advanced degree in a technical field.
• Must have IAT Level III DoD baseline certifications.
• Formal NSA CSfC/PKI administration training is required.

Responsibilities

• Configure CSfC secure enclaves per NSA packages.
• Maintain VPN tunnels with IPsec and Suite B/CNSA crypto.
• Harden and manage NGFWs, routers, switches, and cert management.

Skills

IPsec architectures

BGP/Ospf routing

Network security tooling

Python/Bash/Ansible

On-call rotation

Disaster recovery planning

Education

Masters or PhD in CS/IT/Cybersecurity

DoD 8140 IAT Level III certifications

CSfC architectures training

Tools

Cisco

Aruba

Juniper

Palo Alto/Fortinet/Cisco Firepower

F5 BIG-IP

Job description

Bering-Alaka’ina Holdings, LLC is looking for a skilled Commercial Solutions for Classified (CSfC) Network Engineer to provide Information Technology (IT support services) to a customer in Honolulu, Hawai'i.

DESCRIPTION OF RESPONSIBILITIES:

• Configure, deploy, and maintain multi-layered CSfC secure enclaves conforming strictly to NSA Capability Packages (e.g., MSC, MA, and CP).
• Maintain and optimize Inner and Outer Virtual Private Network (VPN) tunnels utilizing diverse IPsec implementations and Suite B / CNSA cryptographic algorithms.
• Configure and harden enterprise networking hardware, including next-generation firewalls (NGFW), enterprise routers, switches, and certificate management systems.
• Manage and maintain Public Key Infrastructure (PKI) components, certificate revocation lists (CRLs), Online Certificate Status Protocol (OCSP) responders, and hardware security modules (HSMs).
• Conduct continuous network monitoring, traffic analysis, performance tuning, and rapid troubleshooting of routing protocol anomalies (BGP, OSPF, EIGRP) and cryptographic failures.
• Partner with cybersecurity compliance and auditing teams to conduct Security Technical Implementation Guide (STIG) compliance reviews and remediate Plan of Action and Milestones (POA&M) findings.
• Author and update standard operating procedures (SOPs), network topology diagrams, continuous monitoring plans, and disaster recovery runbooks.
• Provide escalation support to Tier II/III technicians during operational outages or security incident response events.
• Other duties as assigned by Supervisor.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

• Accredited Masters or PHD in Computer Science, Information Technology, Data Science, Cybersecurity, Software Engineering or a related technical discipline.
• DoD Directive 8140 Baseline: IAT Level III (Advanced) = CompTIA SecurityX/CASP, CCNA, CCNP Security, CCSP, GCED, CGIA, GCLD, GDSA, GFACT.
• Computing Environment / Vendor Certifications: Professional-Level Network Certification = Cisco Certified Network Professional (CCNP Enterprise or Security), Aruba Certified Design/Mobility Professional, or Juniper JNCIP.
• Specialized Training: Cryptography & Security = Formal training in NSA CSfC architectures, Suite B / CNSA standards, and PKI/CA administration.

REQUIRED SKILLS AND EXPERIENCE:

• Three plus (3+) years directly administering double-tunnel IPsec architectures, Suite B/CNSA cipher suites, Certificate Authorities, and Key Management Systems. Direct experience authoring and submitting NSA CSfC registration packages and deviation waivers.
• Seven plus (7+) years hands-on experience configuring Cisco, Aruba, or Juniper switches, routers, and IPsec aggregators. Deep expertise in dynamic routing (BGP, OSPF), VXLAN, MPLS, and high-availability gateway protocols.
• Advanced configuration of Palo Alto Networks, Fortinet, or Cisco Firepower firewalls, IDS/IPS, and web proxies. Hands-on experience with F5 BIG-IP / SSL Orchestrator and hardware load balancers.
• Proven experience applying DISA STIGs, SCAP tools, and resolving vulnerability scans (Nessus/ACAS). Familiarity with RMF (Risk Management Framework) lifecycle controls (NIST SP 800-37 / 800-53).
• Advanced packet analysis using Wireshark, tcpdump, and network performance monitoring platforms (Elastic, Cribl). Scripting experience (Python, Bash, or Ansible) for network automation and configuration verification.
• Primary day position with required participation in on-call operational rotation to customer escalations.

REQUIRED CITIZENSHIP AND CLEARANCE:

• Must be a U.S. Citizen
• Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).

COMPENSATION DETAILS:

• $160,000.00
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kīkaha Solutions, LLC;and Pololei Solutions, LLC.

For additional information, please visit www.beringalakaina.com

#LI-JS1

#ClearanceJobs