Federal IT Consulting

Runs cybersecurity and IT projects for federal agencies

CSSP Engineer/Architect - Subject Matter Expert

Security Engineering & ArchitectureUpdated on Nov 10

Full-timeIndianapolis, IN, USANo salary listedIn-person

About the Job

Requirements

A United States citizen with an active Top Secret/SCI Department of Defense security clearance is required.
At least 10 years of cybersecurity engineering experience is required.
CISSP-ISSEP certification demonstrating security engineering expertise is required, or an equivalent certification.
DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification is required.
Expert knowledge of intrusion detection and prevention systems, Enterprise Security Systems, Assured Compliance Assessment Solution, and penetration testing tools is required.
Experience with security information and event management solutions such as ArcSight and Splunk is required.
Expertise in network forensics and traffic analysis is required.
Experience with CSSP accreditation processes is required.
Knowledge of JFHQ DODIN and Cyber Command reporting requirements is required.
Experience engineering solutions is required.
A bachelor's degree in Computer Science, Engineering, Information Technology, or a related field is required.
The ability to pass a background check and maintain applicable security clearances at the level required by the client is required.

Responsibilities

Lead the CSSP engineering team for security infrastructure technologies.
Engineer network perimeter defense appliances and security information and event management toolsets.
Operate CSSP-specific toolsets, including intrusion detection and prevention systems, Enterprise Security Systems, Assured Compliance Assessment Solution, penetration tools, traffic monitoring, and network forensics, for unclassified and classified enclaves.
Develop and maintain the Cybersecurity Plan within 30 days after the start of the period of performance.
Ensure all corrective action plans for identified weaknesses are reported and completed.
Maintain full compliance with JFHQ DODIN and Cyber Command reporting requirements.
Perform security reviews of all new equipment deployed on CCE enclaves and achieve 95% Category 1 and 2 compliance.
Ensure all new deployments comply with Security Technical Implementation Guides.
Operate and maintain CSSP accreditation and achieve three-year accreditation.
Align applicable technologies with Zero Trust architecture.

Desired Qualifications

GIAC certifications, including GPEN, GWAPT, or GCIH.
Experience with DFAS CSSP operations.
Prior DoD Cyber Command experience.
Penetration testing certifications such as OSCP or CEH.
Experience with DoD CSSP Evaluators Scoring Metrics.
Experience implementing Zero Trust architecture.
Cloud security engineering experience.

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

We are looking for a CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Responsibilities

Lead CSSP engineering team for security infrastructure technologies
Engineer network perimeter defense appliances and SIEM toolsets
Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
Ensure 100% corrective action plans reported and completed for weaknesses identified
Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
Ensure 100% STIG compliance for new deployments
Operate and maintain CSSP accreditation achieving 3-year accreditation
Align all technologies with Zero Trust architecture where applicable

Experience/Skills:

10+ years cybersecurity engineering experience
CISSP-ISSEP certification demonstrating security engineering expertise
DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification
Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
Experience with SIEM solutions (ArcSight, Splunk)
Network forensics and traffic analysis expertise
Experience with CSSP accreditation processes
Knowledge of JFHQ DODIN and Cyber Command reporting requirements
Experience engineering solutions

Preferred Qualifications:

GIAC certifications (GPEN, GWAPT, GCIH)
Experience with DFAS CSSP operations
Prior DoD Cyber Command experience
Penetration testing certifications (OSCP, CEH)
Experience with DoD CSSP Evaluators Scoring Metrics
Zero Trust architecture implementation experience
Cloud security engineering experience

Education:

Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

CISSP-ISSEP or equivalent

Clearance:

Active Top Secret/SCI clearance is required.
Must be a United States Citizen and pass a background check.
Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.

About the Company

Federal IT Consulting

Runs cybersecurity and IT projects for federal agencies

Federal IT Consulting runs cybersecurity, IT and engineering projects for the Department of Defense, other national security agencies and civilian federal departments. Beyond securing and operating classified and unclassified networks, it builds mission software and mobile apps, moves systems to the cloud and supports health IT such as the Military Health System. A separate engineering practice manages energy savings, construction programs and environmental compliance at military bases. Agencies buy its services through government contract vehicles and task orders, with cleared staff working at government sites, its regional offices or remotely. It was founded in 2003 and is headquartered in Rockville, Maryland.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Rockville, MD
Founded: 2003

Recently Posted Jobs

Explore more opportunities at Federal IT Consulting

See more jobs