We are looking for a
CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).
A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.Responsibilities- Lead CSSP engineering team for security infrastructure technologies
- Engineer network perimeter defense appliances and SIEM toolsets
- Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
- Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
- Ensure 100% corrective action plans reported and completed for weaknesses identified
- Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
- Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
- Ensure 100% STIG compliance for new deployments
- Operate and maintain CSSP accreditation achieving 3-year accreditation
- Align all technologies with Zero Trust architecture where applicable
Experience/Skills:- 10+ years cybersecurity engineering experience
- CISSP-ISSEP certification demonstrating security engineering expertise
- Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
- Experience with SIEM solutions (ArcSight, Splunk)
- Network forensics and traffic analysis expertise
- Experience with CSSP accreditation processes
- Knowledge of JFHQ DODIN and Cyber Command reporting requirements
- Experience engineering solutions for NIPRNet, SIPRNet, and JWICS
Preferred Qualifications:- GIAC certifications (GPEN, GWAPT, GCIH)
- Experience with DFAS CSSP operations
- Prior DoD Cyber Command experience
- Penetration testing certifications (OSCP, CEH)
- Experience with DoD CSSP Evaluators Scoring Metrics
- Zero Trust architecture implementation experience
- Cloud security engineering experience
Education:- Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field
Certifications:- CISSP-ISSEP or equivalent
Clearance:- Active Top Secret/SCI clearance is required.
- Must be a United States Citizen and pass a background check.
- Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC'S Client(s)/Customer(s)/Prime contractor(s).
