SME Network and Computer Systems Administrator

CP Marine LLC; Oklahoma City (OK); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan with company matching

Tax-deferred savings options

Paid time off

Job summary

Goldbelt is seeking a SME Network and Computer Systems Administrator to lead high-assurance network design and security within classified enclaves. You will architect isolated networks, deploy NSA-approved encryption, and enforce stringent access controls per DoD directives.

The role requires 6+ years of related experience, TS clearance, and familiarity with JSIG regulations. You will work on secure communications, system hardening, and ongoing risk reduction in a DoD contracting environment.

Qualifications

• Shall hold professional and approved U.S. Department of War Directive 8140.01 certifications as required and appropriate per the duty position (ex. CompTIA Security+).
• Minimum of 6+ years of related experience.
• Must have a TOP SECRET security clearance.
• Bachelor's degree preferred.

Responsibilities

• Design and implement isolated local and wide-area multi-tenant network enclaves enforcing strict data-in-transit segregation between differing SAR compartments.
• Configure, deploy, key, and maintain NSA-approved Type-1 High Assurance IP Encryption (HAIPE) devices to establish secure overlays.
• Apply DISA STIGs across multilayer switches, routers, and firewalls.
• Develop network boundary diagrams, baselines, and SSP documentation for Authorization Packages.
• Engineer network segmentation using VRF-Lite/MPLS, 802.1Q VLAN isolation, and private ACLs.
• Enforce 802.1X port authentication, MAC filtering, and tight port lockdown inside SAPF.
• Validate hash integrity and deploy firmware and security definitions onto air-gapped devices.
• Perform intake, serial tracking, tamper inspections, and provenance verification on all network hardware.

Skills

SAP network systems

JSIG regulations

Security clearance

Customer service

Communication skills

Education

Bachelor's degree in a related field

Tools

KG-175 TACLANE

HAIPE devices

STIGs

Air-gapped network appliances

Job description

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

A leader in cutting-edge research and technology in the cyber arena, CPMG focuses on using business drivers to guide cybersecurity activities and manage risk. CPMG offers flexible, integrative solutions for Department of Defense (DoD) contractors, among others, and specializes in cybersecurity, information and operational technology, electronic security surveillance, and support services.

Summary

We are actively seeking a SME Network and Computer Systems Administrator to act as the primary architect and guardian of high-assurance communications within classified enclaves, directly implementing the stringent security requirements mandated by DoDM 5205.07 and the JSIG. Their core responsibility centers on designing, hardening, and maintaining physically and logically isolated network infrastructures to prevent unauthorized lateral movement between highly compartmentalized program elements.

Responsibilities

Essential Job Functions

• Design and implement isolated local and wide-area multi-tenant network enclaves enforcing strict data-in-transit segregation between differing Special Access Required (SAR) compartments.
• Implement and verify physical and electromagnetic separation of cryptographic/classified (RED) and unclassified/cipher (BLACK) signal cabling, conduits, and equipment racks.
• Configure, deploy, key, and maintain NSA-approved Type-1 High Assurance IP Encryption (HAIPE) devices (e.g., KG-175 TACLANE) to establish point-to-point and mesh cryptographically secure overlays.
• Apply, script, and continuously audit Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across multilayer switches, routers, and firewalls.
• Develop network boundary diagrams, hardware/software baselines, port/protocol/service (PPS) documentation, and control implementations for the System Security Plan (SSP) and Authorization Packages.
• Engineer and manage strict network segmentation using Virtual Routing and Forwarding (VRF-Lite/MPLS), 802.1Q VLAN isolation, and private access control lists (ACLs) to block unauthorized inter-compartment lateral traversal.
• Enforce IEEE 802.1X port-level authentication, MAC address filtering, and dynamic VLAN assignment; disable and lock down all unassigned physical switch ports inside the SAPF.
• Validate hash integrity and deploy firmware, software upgrades, and security definitions onto air-gapped network appliances.
• Perform rigorous intake, serial tracking, tamper inspections, and provenance verification on all commercial network hardware prior to introduction into a SAP environment.
• Support and maintain facility physical access control, intrusion detection and video surveillance systems
• Support and maintain organization video teleconferencing (VTC) system
• Execute emergency technical network isolation procedures (e.g., remote quarantine, port isolation) during suspected security incidents, data spills, or unauthorized cross-contamination.
• Maintain strict configuration baselines, automate differential backups, and execute configuration audits to ensure unapproved network changes do not invalidate the system's Authority to Operate (ATO).
  

Qualifications

Necessary Skills and Knowledge

• Must have verifiable expertise in defining, implementing and sustaining SAP network systems, practices and procedures for SAP facilities.
• Verifiable expertise in products and systems utilized by the SAP community and are familiar with the Air Force Instructions, JSIG-series regulations or equivalent.
• Excellent customer service, written and verbal communication skills.
• Ability to clearly and concisely articulate technical matters to both technical and non-technical audiences.

Minimum Qualifications

• Shall hold professional and approved U.S. Department of War Directive 8140.01 certifications as required and appropriate per the duty position (ex. CompTIA Security+).
• Minimum of 6+ years of related experience.
• Must have a TOP SECRET security clearance.

Preferred Qualifications

• Bachelors degree in a related field.

Pay And Benefits

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.