Sr CSFC Engineer

Intrepid Global Solutions; North Carolina; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Intrepid Global Solutions seeks a CSfC Engineer to design, implement, and sustain NSA CSfC solutions for DoD classified environments. You will lead O&M activities, develop secure architectures, and ensure compliance with CSfC Capability Packages.

The role requires extensive experience with VPNs, firewalls, PKI, and secure network designs, supporting large-scale remote access and distributed networks. A Secret clearance is preferred.

Qualifications

• AA/AS + 10 years of IT experience.

Responsibilities

• Design, engineer, implement, configure, and sustain NSA CSfC solutions supporting classified DoD communications and information systems.
• Develop CSfC architectures in accordance with NSA CPs and approved Components List requirements.
• Engineer secure solutions using two independent layers of commercial encryption to protect classified information across untrusted networks.
• Design and support CSfC solutions for Mobile Access, Campus WLAN, Multi-Site Connectivity, Data-at-Rest, and other applicable use cases.
• Evaluate commercial hardware and software products for CSfC compliance and integration into DoD architectures.
• Configure and troubleshoot VPN gateways, IPsec tunnels, firewalls, routers, switches, wireless infrastructure, endpoint devices, and security components.
• Develop network diagrams, security architectures, data-flow diagrams, and BOMs.

Skills

CSfC CSfC requirements

VPN technologies

Firewalls

PKI / certificates

Mobile and remote access

Encryption layers

Secure DoD networks

Security architectures

Vendors (Cisco, Palo Alto, Aruba, Jun"

Active Directory

Education

AA/AS + 10 years IT experience

BA/BS + 7 years IT experience

DoD Cyber Workforce 8140 Baseline IAT Level III

RMF knowledge

VDI experience

Tools

Cisco

Palo Alto

Aruba

Juniper

VMware

Microsoft

Red Hat

Entrust

Cisco ISE

PKI

Splunk

ServiceNow

Ansible/AWX

Job description

We are seeking a Commercial Solutions for Classified (CSfC) Engineer, responsible for the design, engineering, implementation, integration, accreditation support, troubleshooting, and sustainment of secure communications solutions supporting Department of Defense (DoD) classified environments. The CSfC Engineer serves as a technical subject matter expert for solutions utilizing commercial technologies in accordance with NSA Commercial Solutions for Classified (CSfC) requirements, Capability Packages, and applicable DoD cybersecurity standards. This position requires extensive experience with secure network architecture, encryption, VPN technologies, firewalls, routing and switching, endpoint security, PKI, certificates, mobile and remote access solutions, and classified network environments. The Engineer works closely with cybersecurity, network engineering, systems engineering, Information System Security Managers/Officers (ISSM/ISSO), and government stakeholders to develop secure, compliant, and operationally effective CSfC solutions. The CSfC capability is known as Virtual Secure – Remote (ViSR) and supports remote SIPRNet access for up to 2,000 concurrent users initially but could be scalable up to 15,000 concurrent users as the Government continues to onboard users. The successful candidate will lead the Operations and Maintenance activities and provide engineering support to expand the capacity of the Fort Bragg ViSR solution set. The candidate will also provide support to implement the solution architecture in other NETCOM areas of operation.

KEY RESPONSIBILITIES:

• Design, engineer, implement, configure, and sustain NSA CSfC solutions supporting classified DoD communications and information systems.
• Develop CSfC architectures in accordance with applicable NSA CSfC Capability Packages (CPs) and approved Components List requirements.
• Engineer secure solutions using two independent layers of commercial encryption to protect classified information across untrusted networks.
• Design and support CSfC solutions for Mobile Access, Campus WLAN, Multi-Site Connectivity, Data-at-Rest, and other applicable use cases.
• Evaluate commercial hardware and software products for compliance with CSfC requirements and integration into existing DoD network architectures.
• Configure and troubleshoot VPN gateways, IPsec tunnels, firewalls, routers, switches, wireless infrastructure, endpoint devices, and associated security components.
• Develop detailed network diagrams, security architectures, data-flow diagrams, interface documentation, bills of materials, configuration baselines, and implementation procedures.
• Support CSfC solution registration, authorization, assessment, documentation, and maintenance activities.
• Maintain configuration compliance with approved CSfC architectures, Capability Packages, and established security baselines.
• Perform technical analysis of new or revised NSA CSfC requirements and determine their impact on deployed solutions.
• Support implementation of required software, firmware, certificates, cryptographic algorithms, and security configuration updates.
• Perform vulnerability remediation, patching, configuration management, and lifecycle management for CSfC components.
• Troubleshoot complex connectivity, encryption, authentication, certificate, routing, firewall, and endpoint issues.
• Perform root-cause analysis of CSfC service interruptions and develop corrective actions to restore mission capability.
• Develop and execute implementation plans, test plans, rollback procedures, and validation procedures for system changes.
• Participate in technical reviews, engineering boards, change-control activities, and configuration-management processes.
• Provide Tier III engineering support for CSfC-related incidents and escalated technical issues.
• Coordinate with vendors, government engineering organizations, cybersecurity personnel, and other technical stakeholders to resolve interoperability and security issues.
• Maintain accurate as-built documentation and configuration records for deployed CSfC solutions.
• Perform special projects and other duties as assigned.

EDUCATION & EXPERIENCE:

• AA/AS + 10 years of IT experience
• BA/BS + 7 years of IT experience
• 5 years of demonstrated experience designing, implementing, supporting, or evaluating NSA CSfC solutions.
• 3 years Virtual Desktop Infrastructure (VDI) experience
• Computing Environment Certification (e.g., MCSA, Linux, etc)
• Qualifying Professional Certifications for DoD Cyber Workforce 8140 Baseline IAT Level III Experience working DoD IT environments
• Working knowledge of DoD RMF processes
• Experience working in a Microsoft Active Directory Environment
• Experience implementing Identity Management applications and AAA
• Experience with technologies from vendors commonly used in secure DoD network environments is highly desirable, including: Cisco, Palo Alto Networks, Aruba, Juniper, VMware, Microsoft, Red Hat, Entrust, Cisco ISE, Active Directory, PKI, Splunk, ServiceNow, Ansible/AWX, and network monitoring and automation platforms.
• Experience supporting tactical or forward-deployed CSfC implementations, remote-access solutions, and geographically distributed classified networks is also highly desirable.
• Good Oral presentation and Written Communication skills
• Customer Focused Interpersonal Awareness Analytical Thinking Conceptual Thinking Strategic Thinking and Initiative Foster Innovation Results Oriented

SECUROTY CLEARANCE: Active Secret Required

Intrepid Acquisition Holdings, LLC www.intrepidgs.com Intrepid Acquisition Holdings, LLC. (IAH), is a leading provider of global-scale logistics, facilities management, and advanced professional and technical services. IAH provides a broad spectrum of services and solutions to U.S. and international government agencies, and organizations. As a world-class leader in providing seasoned program management, IAH leverages and integrates its capabilities to provide safe, innovative, and reliable solutions to meet customers' diverse and complex challenges. Intrepid Acquisition Holdings, LLC. ("IAH" and/or "Company") and its affiliates, including but not limited to IAP World Services, Inc., Readiness Management Support L.C., JPATS Logistics Services, LLC., and subsidiaries is an EOE, including disability/vets. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. At Intrepid Global Solutions, we lead the way in mission‑critical support where others can not or will not. With over 65 years of expertise supporting defense and national security missions, Intrepid Global Solutions excels in contingency operations, air traffic management, logistics, facilities management, information technology, and engineering services. Operating across 110+ locations in 27 countries, we are renowned for navigating the most challenging environments. Certified in ISO and NIST standards, we provide reliable, mission‑critical solutions to both U.S. and international government agencies, ensuring success in every global mission. Unrivaled Commitment. Global Solutions.