CSFC Security Engineer

<p><b><u>Type of Requisition:</u></b></p>Regular<p></p><p></p><p><u><b>Clearance Level Must Currently Possess:</b></u></p>Secret<p></p><p></p><p><u><span><span><span><span><span><b>Clearance Level Must Be Able to Obtain:</b></span></span></span></span></span></u></p>Secret<p></p><p></p><p><b><u>Public Trust/Other Required:</u></b></p>None<p></p><p></p><p><u><b>Job Family:</b></u></p>Network Engineering<p></p><p></p><p><b><u>Job Qualifications:</u></b></p><p><b>Skills:</b></p>Firewalls, Network Security, Virtual Private Networks (VPNs)<p><b>Certifications:</b></p>None<p><b>Experience:</b></p>5 + years of related experience<p><b>US Citizenship Required:</b></p>Yes<p></p><p></p><p><u><b>Job Description:</b></u></p><p><b><span>Duties/Responsibilities: </span></b>As an EITEN CSfC Security Administrator, you will play a critical role as a network security professional, responsible for operating and maintaining Commercial Solutions for Classified (CSfC) systems. You will ensure these systems meet NSA, DoD, and customer requirements, while supporting secure communication solutions, troubleshooting issues, and collaborating with technical teams to design, implement, and maintain network infrastructure.</p><p></p><ul><li>Operate and maintain CSfC-compliant solutions that meet NSA, DoD, and customer standards.</li></ul><p></p><ul><li>Develop and modify system scripts to enhance network performance and security.</li></ul><p></p><ul><li>Write and maintain standardized system documentation, including configuration guides, test procedures, and training materials.</li></ul><p></p><ul><li>Provide on-site installation, integration, and technical training to technical and non-technical users on the daily use, management, and troubleshooting of CSfC solutions.</li></ul><p></p><ul><li>Configure and manage network, software, and hardware components, including firewalls, Intrusion Prevention/Detection systems, VPN gateways, and wireless controllers (e.g., Aruba, Cisco, Juniper).</li></ul><p></p><ul><li>Perform network design, systems integration, and secure communication network maintenance.</li></ul><p></p><ul><li>Configure and manage PKI Certificate Authorities for CSfC solutions, with a focus on systems like ISC CertAgent, Microsoft Windows Server, and Red Hat Certificate systems.</li></ul><p></p><ul><li>Author Network Engineering Design Packages, including implementation project plans and detailed procedures.</li></ul><p></p><ul><li>Apply DoD STIGs and IAVAs to maintain security compliance.</li></ul><p></p><ul><li>Collaborate with operations departments to design approved infrastructure solutions.</li></ul><p></p><ul><li>Serve as the escalation point for Tier 2 and 3 system outages and support troubleshooting efforts.</li></ul><p></p><ul><li>Prepare test reports and configuration documentation to meet customer standards.</li></ul><p></p><ul><li>Provide technical expertise to sales engineering teams during complex network developments.</li></ul><p></p><ul><li>Identify and recommend hardware and support solutions based on research, analysis, and customer needs.</li></ul><p></p><ul><li>Enhance departmental and organizational reputation by contributing innovative solutions and taking ownership of new requests.</li></ul><p></p><ul><li>Perform special projects and other duties as assigned.</li></ul><p></p><p><b><u>Minimum/General Experience</u></b><b>: </b>This position requires 5+ years specialized <span>experience.  </span></p><ul><li>Familiarity with network security tools and systems, including firewalls, Intrusion Prevention/Detection systems, and PKI solutions.</li></ul><p></p><ul><li>Proven ability to collaborate with cross-functional teams and deliver complex projects on time.</li></ul><p></p><p><b><u>Functional Responsibilities</u></b><b>:</b> Applies subject matter expertise to operate and maintain CSfC solutions and secure network systems. Resolves complex issues related to network design, system integration, and security compliance. Creates and documents standardized configurations, trains end users, and supports large-scale projects in classified environments. Serves as a trusted technical resource for troubleshooting and technical escalations.</p><p></p><p></p><p><b><u>Minimum Education</u></b><b>: </b>A Bachelor’s degree from an accredited college or university with a curriculum or major field of study which is closely related to the work to be automated, and/or in a computer science, information system, a physical science, engineering or a <span>mathematics-intensive</span> discipline.</p><p>Education and experience requirements may be substituted with:</p><p><span>1.     A</span> Master’s Degree (in subjects described above) and four years of relevant experience.</p><p><span>2.     No</span> degree and ten years of directly applicable experience.</p><p><span>3.     An</span> applicable certificate of training with two years undergraduate work can be considered equivalent to a Bachelor’s degree.</p><p></p><p><b><u>C