Secure CSfC Network Architect for DoD Programs

Validatek; Fort Belvoir (VA); On-site; USD 120,000 - 140,000; Full time

Job summary

ValidaTek is seeking an experienced Network Engineer (SME) to join the I3TS team supporting a Defense program in Fort Belvoir, VA. You will collaborate with government leaders to drive modernization in networking and security services.

The role emphasizes CSfC architecture, NSA package alignment, and CA/PKI integration. Requires TS/SCI clearance, DoD experience, and advanced certifications. On-site work with strict security controls.

Qualifications

• Bachelor's degree or higher in a STEM field with 12–15 years of relevant experience.
• 12+ years of progressive network engineering in DoD/federal/defense contractor environments.
• Active TS/SCI Clearance.
• DoD 8570.01-M/8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP).
• Active Cisco/Aruba/Palo Alto certifications (CCNA/CCNP or similar).
• Experience with Cisco/Aruba IPsec and SSL VPNs, IKEv2, cryptography, and dynamic routing.

Responsibilities

• The CSfC Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries using Cisco and Aruba VPNs and dynamic routing in NSA CSfC compliance.
• Architect, deploy, and maintain CSfC infrastructure within Black/Gray/Red networks.
• Design, configure, and maintain CSfC architectures aligned with NSA packages, MA/MSC, and CWLAN requirements.
• Implement enterprise routing protocols (BGP/OSPF) with redundant IPsec VPN tunnels and remote SSL VPNs.
• Author, optimize, and audit Palo Alto NGFW policies, IDS/IPS signatures, and vulnerability protections.
• Manage Cisco ISE and Aruba ClearPass for 802.1X NAC, RADIUS/TACACS+, posture assessment, and endpoint profiling.
• Integrate PKI components, managing certificates, CAs, and OCSP validation.
• Prepare CSfC compliance artifacts and registration packages for NSA PMO submission.

Skills

CSfC Networking

BGP/OSPF

VPN & PKI

NSA CSfC

I3TS teamwork

Education

Bachelor's degree or higher

Tools

Cisco IOS-XE

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE

Aruba ClearPass

PKI/OCSP

NTP

Job description

ValidaTek is seeking an experienced Network Engineer (SME) to join the I3TS team supporting a Defense program in Fort Belvoir, VA. You will collaborate with government leaders to drive modernization in networking and security services.

The role emphasizes CSfC architecture, NSA package alignment, and CA/PKI integration. Requires TS/SCI clearance, DoD experience, and advanced certifications. On-site work with strict security controls.