Senior IT Systems Engineer: Classified Cloud & Security

Arcfield; Virginia; On-site; USD 123,000 - 214,000; Full time

Job summary

Arcfield is seeking an experienced IT Systems Engineer/Administrator to support secure classified IT infrastructure within a SCIF. You will administer on-site servers/desktops, manage classified cloud services (C2S) and hybrid environments, and lead Tier II/III engineering support with RMF and ICD-503 compliance.

The role requires DoD IA certifications, AD/GPO mastery, and automation via PowerShell or Python.

Qualifications

• Must possess and be able to maintain a TS/SCI with Poly.
• US Citizenship is required.
• Bachelor's degree and 10-12 years of experience, OR Master's degree and 8-10 years of experience, or PhD and 5-7 years experience, or Associate's degree and 14 years of experience, or HS diploma/GED and 16 years of experience.
• Minimum of 5 years of experience working in the IC and/or DoW.
• Degree in Cybersecurity, Information Technology, Computer Science, OR equivalent technical experience.
• DoD 8570/8140 IAM/IAT Level II OR III certification (e.g., Security+, CISSP, CISM, or CASP+) is required.
• Experience administering ACAS, Nessus, and Splunk vulnerability and logging scanners.
• Deep operational knowledge of the RMF lifecycle and ICD-503 security accreditation procedures.
• Design, provision and maintain secure, resilient, and scalable C2S infrastructure using AWS Well-Architected Framework.
• Proven experience hardening systems utilizing STIGs and CIS benchmarks.
• Advanced management of Active Directory (AD) with secure GPOs.
• PowerShell or Python to automate configuration baseline checks and patch verification.
• Working knowledge of networking functions and configuring C2S components (VPCs, subnets, Route 53, transit gateways, load balancers).

Responsibilities

• Systems Administration: 100% on-site management of secure server & desktop infra in classified space.
• Cloud Infrastructure & Architecture: develop/manage classified C2S infra; ensure high availability.
• Tier II/III advanced support: diagnose/resolve complex infra, server, network issues.
• Tier ITroubleshooting: handle limited desktop/user issues.
• Security & Compliance: enforce security controls per RMF/ICD-503.
• Hybrid Infrastructure Management: sync on-prem with classified cloud env.
• Secure Endpoint Deployment: deploy hardened OS, push security patches.
• Identity & Access Management: enforce MFA with RSA tools.
• Audit & Log Management: configure Splunk for continuous auditing.
• Support user needs: assist with strategic plans and system changes for security/usability.
• Vulnerability Assessment: run scans (Nessus/ACAS), remediate findings.

Skills

TS/SCI with Poly

US Citizenship

RMF/ICD-503

PowerShell or Python

Networking (VPCs, Route 53, subnets)

AWS Well-Architected for C2S

DISA STIGs / CIS Benchmarks

AD GPOs management

ACAS/Nessus/Splunk experience

DoD IAM/IAT Level II/III certs

Security, Compliance & MFA

Education

Bachelor’s degree in Cybersecurity / IT / CS or equivalent

10-12 years of IC/DoW experience or equivalent

DoD 8570/8140 IAM/IAT Level II or III certification

Tools

ACAS

Nessus

Splunk

Job description

Arcfield is seeking an experienced IT Systems Engineer/Administrator to support secure classified IT infrastructure within a SCIF. You will administer on-site servers/desktops, manage classified cloud services (C2S) and hybrid environments, and lead Tier II/III engineering support with RMF and ICD-503 compliance.

The role requires DoD IA certifications, AD/GPO mastery, and automation via PowerShell or Python.