Bering-Alaka'ina Holdings, LLC is looking for a skilled
Commercial Solutions for Classified (CSfC) Network Engineer to provide Information Technology (IT support services) to a customer in
Honolulu, Hawai'i.
DESCRIPTION OF RESPONSIBILITIES:- Configure, deploy, and maintain multi-layered CSfC secure enclaves conforming strictly to NSA Capability Packages (e.g., MSC, MA, and CP).
- Maintain and optimize Inner and Outer Virtual Private Network (VPN) tunnels utilizing diverse IPsec implementations and Suite B / CNSA cryptographic algorithms.
- Configure and harden enterprise networking hardware, including next-generation firewalls (NGFW), enterprise routers, switches, and certificate management systems.
- Manage and maintain Public Key Infrastructure (PKI) components, certificate revocation lists (CRLs), Online Certificate Status Protocol (OCSP) responders, and hardware security modules (HSMs).
- Conduct continuous network monitoring, traffic analysis, performance tuning, and rapid troubleshooting of routing protocol anomalies (BGP, OSPF, EIGRP) and cryptographic failures.
- Partner with cybersecurity compliance and auditing teams to conduct Security Technical Implementation Guide (STIG) compliance reviews and remediate Plan of Action and Milestones (POA&M) findings.
- Author and update standard operating procedures (SOPs), network topology diagrams, continuous monitoring plans, and disaster recovery runbooks.
- Provide escalation support to Tier II/III technicians during operational outages or security incident response events.
- Other duties as assigned by Supervisor.
REQUIRED DEGREE/EDUCATION/CERTIFICATION:- Accredited Masters or PHD in Computer Science, Information Technology, Data Science, Cybersecurity, Software Engineering or a related technical discipline.
- DoD Directive 8140 Baseline: IAT Level III (Advanced) = CompTIA SecurityX/CASP, CCNA, CCNP Security, CCSP, GCED, CGIA, GCLD, GDSA, GFACT.
- Computing Environment / Vendor Certifications: Professional-Level Network Certification = Cisco Certified Network Professional (CCNP Enterprise or Security), Aruba Certified Design/Mobility Professional, or Juniper JNCIP
- Specialized Training: Cryptography & Security = Formal training in NSA CSfC architectures, Suite B / CNSA standards, and PKI/CA administration.
REQUIRED SKILLS AND EXPERIENCE:- Three plus (3+) years directly administering double-tunnel IPsec architectures, Suite B/CNSA cipher suites, Certificate Authorities, and Key Management Systems. Direct experience authoring and submitting NSA CSfC registration packages and deviation waivers.
- Seven plus (7+) years hands-on experience configuring Cisco, Aruba, or Juniper switches, routers, and IPsec aggregators. Deep expertise in dynamic routing (BGP, OSPF), VXLAN, MPLS, and high-availability gateway protocols.
- Advanced configuration of Palo Alto Networks, Fortinet, or Cisco Firepower firewalls, IDS/IPS, and web proxies. Hands-on experience with F5 BIG-IP / SSL Orchestrator and hardware load balancers.
- Proven experience applying DISA STIGs, SCAP tools, and resolving vulnerability scans (Nessus/ACAS). Familiarity with RMF (Risk Management Framework) lifecycle controls (NIST SP 800-37 / 800-53).
- Advanced packet analysis using Wireshark, tcpdump, and network performance monitoring platforms (Elastic, Cribl). Scripting experience (Python, Bash, or Ansible) for network automation and configuration verification.
- Primary day position with required participation in on-call operational rotation to customer escalations.
REQUIRED CITIZENSHIP AND CLEARANCE:- Must be a U.S. Citizen
- Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).
COMPENSATION DETAILS:- $160,000.00
- The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.
Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.
#LI-JS1
#ClearanceJobs
