Systems Engineer SME

Platinum Technologies; Fort Belvoir (VA); On-site; USD 160,000 - 170,000; Full time

Job summary

Platinum Technologies is seeking a Systems Engineer SME to support the DTRA I3TS program at Fort Belvoir, VA. The role requires an active TS/SCI clearance and extensive CSfC experience to design, deploy, and secure CSfC infrastructure across multiple networks.

You will manage VMware/Nutanix environments, PKI/HSM, and centralized log forwarding to enterprise SIEMs and ensure ATO compliance. The position involves implementing hardened Windows and RHEL systems, and building automated OS deployment

Qualifications

• Active TS/SCI clearance and DoD/DoW systems engineering background required.
• IAT II/III baseline certification required (Security+CE, CySA+, CASP+, or CISSP).
• Experience drafting CSfC KMPs and CMPs for NSA CSfC PMO approval.
• Proficiency with PowerShell, Bash, and Ansible for automated remediation and deployment.
• Experience with PKI, OCSP, HSM, and centralized log collection.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure across Black, Gray, and Red networks.
• Design and sustain multilayer CSfC architectures aligned with NSA Data-at-Rest and Mobile Access.
• Architect and administer PKI, OCSP, and HSM per CSfC requirements.
• Manage VMware vSphere/ESXi or Nutanix AHV hyperconverged environments, with vSAN or distributed storage, and design air-gapped backups.
• Deploy and administer Windows Server (AD, DNS, GPO) and Red Hat Enterprise Linux.
• Implement tamper-resistant centralized syslog collection to enterprise SIEMs (Splunk/Elastic).
• Build automated OS deployment and gold-image workflows using SCCM for CSfC end-user devices.
• Apply patches and DISA STIGs, conduct vulnerability scans, track IAVMs, and remediate findings for ATO.

Skills

Active TS/SCI clearance

DoD/DoW systems engineering

IAT II/III certification

CSfC KMP/CMP experience

PowerShell

Bash

Ansible

VMware vSphere/ESXi

Nutanix AHV

Red Hat Enterprise Linux

Windows Server Admin

Education

Bachelor’s degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, MIS, or related STEM

Tools

VMware vSphere/ESXi

Nutanix AHV

PKI/OCSP/CA

Rsyslog/Syslog-ng

Splunk/Elastic SIEM

Job description

Who we are.

Platinum Technologies is a Northern Virginia based integrated solutions firm that specializes in PaaS, Cybersecurity & AI Platform development for the Defense and Federal Sectors. Our team solves hard problems and helps our Mission Partners achieve their goals. If you are self-motivated, possess demonstrated learning agility, and are passionate about delivering high-quality work products – we want to hear from you.

We lead with technical expertise, but that is just the tip of the iceberg – the ‘Why’ matters. At Platinum, we don’t hire people to just do a job. We provide professional and leadership development to complement our self-motivated domain experts. Our teammates are dot-connecting leaders that operate in a mutually accountable environment to deliver thought leadership, expert technical analysis, and quality execution for our clients.

You.

Platinum Technologies currently has an opportunity for a Systems Engineer SME supporting the Defense Threat Reduction Agency (DTRA) Integrated Information Technology Support Services (I3TS) digital modernization program. In this role, you will work with government and technical leadership to strengthen mission-critical systems, improve operational efficiency, and maintain secure Commercial Solutions for Classified (CSfC) infrastructure. This role is located at Fort Belvoir, VA.

Candidate must hold an active TS/SCI clearance at the time of consideration.

What you get to do.

• Architect, deploy, and maintain CSfC infrastructure across Black, Gray, and Red networks.
• Design and sustain multilayer CSfC architectures aligned with NSA Data-at-Rest (DAR) and Mobile Access (MA) Capability Packages.
• Architect and administer certificate authorities, OCSP responders, public key infrastructure (PKI), and hardware security modules (HSMs) consistent with CSfC key management requirements.
• Manage VMware vSphere/ESXi or Nutanix AHV hyperconverged environments, including vSAN or distributed storage, and design resilient air-gapped backup and disaster recovery solutions.
• Deploy and administer hardened Windows Server (Active Directory, DNS, Group Policy) and Red Hat Enterprise Linux systems.
• Implement tamper-resistant centralized syslog collection and forwarding from network devices, hypervisors, and operating systems to enterprise SIEM platforms, including cross-domain log forwarding.
• Build and maintain automated operating-system deployment and gold-image workflows using Microsoft Configuration Manager (MCM/SCCM) for CSfC end-user devices.
• Apply and validate patches and DISA STIGs, conduct vulnerability scans, track IAVMs, and remediate findings to maintain Authorization to Operate (ATO).

Required Skills.

• Bachelor’s degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or a related STEM field, with 12–15 years of relevant experience; or a master’s degree with 10–13 years of relevant experience. A technical doctorate or equivalent combination of experience, education, and training may be considered.
• 12+ years of progressive systems engineering experience in DoD/DoW, federal, or defense contractor enterprise environments.
• Active TS/SCI security clearance at time of consideration.
• Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP).
• Active computing environment certification in at least one of the following: VMware VCP/VCAP, Nutanix NCP, Red Hat Certified Engineer (RHCE), or Microsoft Certified: Windows Server Hybrid Administrator Associate.
• Direct experience drafting CSfC Key Management Plans (KMPs) and Continuous Monitoring Plans (CMPs) for NSA CSfC PMO approval.
• Proficiency with PowerShell, Bash, and Ansible for automated STIG remediation, configuration drift detection, and certificate deployment.
• Advanced configuration of Rsyslog or Syslog-ng and log-forwarding architectures to enterprise SIEM platforms such as Splunk or Elastic.

The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information.

$160,000 - $170,000 a year