CSSP Engineer/Architect, SME

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

We are looking for a CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Responsibilities

Lead CSSP engineering team for security infrastructure technologies

Engineer network perimeter defense appliances and SIEM toolsets

Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves

Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)

Ensure 100% corrective action plans reported and completed for weaknesses identified

Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements

Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance

Ensure 100% STIG compliance for new deployments

Operate and maintain CSSP accreditation achieving 3-year accreditation

Align all technologies with Zero Trust architecture where applicable

Experience/Skills:

10+ years cybersecurity engineering experience

CISSP-ISSEP certification demonstrating security engineering expertise

DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification

Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools

Experience with SIEM solutions (ArcSight, Splunk)

Network forensics and traffic analysis expertise

Experience with CSSP accreditation processes

Knowledge of JFHQ DODIN and Cyber Command reporting requirements

Experience engineering solutions for NIPRNet, SIPRNet, and JWICS

Preferred Qualifications:

GIAC certifications (GPEN, GWAPT, GCIH)

Experience with DFAS CSSP operations

Prior DoD Cyber Command experience

Penetration testing certifications (OSCP, CEH)

Experience with DoD CSSP Evaluators Scoring Metrics

Zero Trust architecture implementation experience

Cloud security engineering experience

Education:

Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

CISSP-ISSEP or equivalent

Clearance:

Active Top Secret/SCI clearance is required.

Must be a United States Citizen and pass a background check.

Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.