CSSP Engineer/Architect, SME

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

We are looking for a CSSP Engineer/Architect, SME responsible for leading cybersecurity compliance, Risk Management Framework (RMF) accreditation, and continuous monitoring activities for the DFAS Common Computing Environment (CCE). This role oversees Assessment & Authorization (A&A), FISMA compliance, audit readiness, vulnerability management, and security documentation to ensure systems maintain their Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

Responsibilities

• Lead CSSP engineering team for security infrastructure technologies
• Engineer network perimeter defense appliances and SIEM toolsets
• Operate CSSP-specific toolsets (IDS/IPS, ESS, ACAS, penetration tools, traffic monitoring, network forensics) for unclassified and classified enclaves
• Develop and maintain Cybersecurity Plan (due 30 days after start of period of performance)
• Ensure 100% corrective action plans reported and completed for weaknesses identified
• Maintain 100% compliance with JFHQ DODIN/Cyber Command reporting requirements
• Perform security review of all new equipment deployed on CCE enclaves achieving 95% CAT 1&2 compliance
• Ensure 100% STIG compliance for new deployments
• Operate and maintain CSSP accreditation achieving 3-year accreditation
• Align all technologies with Zero Trust architecture where applicable

Experience/Skills:

• 10+ years cybersecurity engineering experience
• CISSP-ISSEP certification demonstrating security engineering expertise
• DoD 8140 A-531-4417 Cyberspace Effects Playlist qualification
• Expert knowledge of IDS/IPS, ESS, ACAS, and penetration testing tools
• Experience with SIEM solutions (ArcSight, Splunk)
• Network forensics and traffic analysis expertise
• Experience with CSSP accreditation processes
• Knowledge of JFHQ DODIN and Cyber Command reporting requirements
• Experience engineering solutions 

Preferred Qualifications:

• GIAC certifications (GPEN, GWAPT, GCIH)
• Experience with DFAS CSSP operations
• Prior DoD Cyber Command experience
• Penetration testing certifications (OSCP, CEH)
• Experience with DoD CSSP Evaluators Scoring Metrics
• Zero Trust architecture implementation experience
• Cloud security engineering experience

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CISSP-ISSEP or equivalent

Clearance:

• Active Top Secret/SCI clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.