CSSP Engineer/Architect, SME

Overview of position:

We are looking for a CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Responsibilities

• Lead CSSP engineering team for security infrastructure technologies
• Engineer network perimeter defense appliances and SIEM toolsets
• Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
• Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
• Ensure 100% corrective action plans reported and completed for weaknesses identified
• Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
• Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
• Ensure 100% STIG compliance for new deployments
• Operate and maintain CSSP accreditation achieving 3-year accreditation
• Align all technologies with Zero Trust architecture where applicable

Experience/Skills:

• 10+ years cybersecurity engineering experience
• CISSP-ISSEP certification demonstrating security engineering expertise
• DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification
• Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
• Experience with SIEM solutions (ArcSight, Splunk)
• Network forensics and traffic analysis expertise
• Experience with CSSP accreditation processes
• Knowledge of JFHQ DODIN and Cyber Command reporting requirements
• Experience engineering solutions for NIPRNet, SIPRNet, and JWICS

Preferred Qualifications:

• GIAC certifications (GPEN, GWAPT, GCIH)
• Experience with DFAS CSSP operations
• Prior DoD Cyber Command experience
• Penetration testing certifications (OSCP, CEH)
• Experience with DoD CSSP Evaluators Scoring Metrics
• Zero Trust architecture implementation experience
• Cloud security engineering experience

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CISSP-ISSEP or equivalent

Clearance:

• Active Top Secret/SCI clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).