SME Network and Computer Systems Administrator

CPMG; Oklahoma City (OK); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401(k) plan

Paid time off

Professional development

Job summary

CPMG, a leader in cyber research and technology, seeks a SME Network and Computer Systems Administrator to architect and safeguard high-assurance communications within classified enclaves. You will implement stringent DoD requirements and harden network infrastructures to prevent unauthorized lateral movement.

The role focuses on designing isolated networks, deploying NSA-approved encryption, and enforcing robust access controls to support secure program elements.

Qualifications

• Must have verifiable expertise in defining, implementing and sustaining SAP network systems, practices and procedures for SAP facilities.
• Familiar with Air Force Instructions, JSIG-series regulations or equivalent.
• Excellent customer service, written and verbal communication skills.
• Ability to clearly articulate technical matters to both technical and non-technical audiences.

Responsibilities

• Design and implement isolated local and wide-area multi-tenant network enclaves enforcing strict data-in-transit segregation between differing SAR compartments.
• Configure, deploy, key, and maintain NSA-approved encryption devices to establish secure overlays.
• Apply STIGs across multilayer switches, routers, and firewalls.
• Develop network boundary diagrams, baselines, and SSP documentation for Authorization Packages.
• Engineer and manage strict network segmentation using VRF-Lite/MPLS and private ACLs.
• Enforce 802.1X authentication and disable unassigned switch ports inside the SAPF.
• Validate hash integrity and deploy firmware upgrades for air-gapped appliances.

Skills

SAP networks

Top Secret clearance

STIGs compliance

LAN/WAN design

Education

Bachelor's degree

Tools

KG-175 TACLANE

HAIPE devices

Job description

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

A leader in cutting-edge research and technology in the cyber arena, CPMG focuses on using business drivers to guide cybersecurity activities and manage risk. CPMG offers flexible, integrative solutions for Department of Defense (DoD) contractors, among others, and specializes in cybersecurity, information and operational technology, electronic security surveillance, and support services.

Summary

We are actively seeking a SME Network and Computer Systems Administrator to act as the primary architect and guardian of high-assurance communications within classified enclaves, directly implementing the stringent security requirements mandated by DoDM 5205.07 and the JSIG. Their core responsibility centers on designing, hardening, and maintaining physically and logically isolated network infrastructures to prevent unauthorized lateral movement between highly compartmentalized program elements.

Responsibilities

Essential Job Functions:

• Design and implement isolated local and wide-area multi-tenant network enclaves enforcing strict data-in-transit segregation between differing Special Access Required (SAR) compartments.
• Implement and verify physical and electromagnetic separation of cryptographic/classified (RED) and unclassified/cipher (BLACK) signal cabling, conduits, and equipment racks.
• Configure, deploy, key, and maintain NSA-approved Type-1 High Assurance IP Encryption (HAIPE) devices (e.g., KG-175 TACLANE) to establish point-to-point and mesh cryptographically secure overlays.
• Apply, script, and continuously audit Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across multilayer switches, routers, and firewalls.
• Develop network boundary diagrams, hardware/software baselines, port/protocol/service (PPS) documentation, and control implementations for the System Security Plan (SSP) and Authorization Packages.
• Engineer and manage strict network segmentation using Virtual Routing and Forwarding (VRF-Lite/MPLS), 802.1Q VLAN isolation, and private access control lists (ACLs) to block unauthorized inter-compartment lateral traversal.
• Enforce IEEE 802.1X port-level authentication, MAC address filtering, and dynamic VLAN assignment; disable and lock down all unassigned physical switch ports inside the SAPF.
• Validate hash integrity and deploy firmware, software upgrades, and security definitions onto air-gapped network appliances.
• Perform rigorous intake, serial tracking, tamper inspections, and provenance verification on all commercial network hardware prior to introduction into a SAP environment.
• Support and maintain facility physical access control, intrusion detection and video surveillance systems
• Support and maintain organization video teleconferencing (VTC) system
• Execute emergency technical network isolation procedures (e.g., remote quarantine, port isolation) during suspected security incidents, data spills, or unauthorized cross-contamination.
• Maintain strict configuration baselines, automate differential backups, and execute configuration audits to ensure unapproved network changes do not invalidate the system's Authority to Operate (ATO).

Qualifications

Necessary Skills and Knowledge:

• Must have verifiable expertise in defining, implementing and sustaining SAP network systems, practices and procedures for SAP facilities.
• Verifiable expertise in products and systems utilized by the SAP community and are familiar with the Air Force Instructions, JSIG-series regulations or equivalent.
• Excellent customer service, written and verbal communication skills.
• Ability to clearly and concisely articulate technical matters to both technical and non-technical audiences.

Minimum Qualifications:

• Shall hold professional and approved U.S. Department of War Directive 8140.01 certifications as required and appropriate per the duty position (ex. CompTIA Security+).
• Minimum of 6+ years of related experience.
• Must have a TOP SECRET security clearance.

Preferred Qualifications:

• Bachelors degree in a related field.

Pay and Benefits

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.