I

Senior CSFC Security Engineer Manager

ID Technologies
Full-time
Remote
United States

Overview

 



Responsibilities

    • Analyze existing Archon solutions to develop steps and processes to improve operating within the constraints of a U.S. Government technology solution
    • Enforce all IS cybersecurity policies and procedures, as defined by cybersecurity-related documentation
    • Develop security recommendations for program and system specific designs, configurations, policies. and procedures
    • Assist in review of all proposed system or software application changes against the latest NIST standards and all other applicable standards
    • Provide technical assistance for network administrative staff
    • Review and analyze system audit logs
    • Review ports, protocols, and services (PPS)
    • Ensure implementation of periodic security inspections, assessments, tests, and reviews
    • Analyze and interpret vulnerability assessment results
    • Participate in audit and compliance visits
    • Conduct Security Technical Implementation Guide (STIG) Compliance assessments
    • Provide input and recommendations to Government personnel for all management, operational and technical controls
    • Provide DoD/NIST RMF Operations Support and common administrative support
    • Review, edit, comment, and analyze documents, and recommend corrections/changes
    • Prepare briefs and present oral presentations to update the Government on the status of actions
    • Install, Configure, Operate, and Support Graylog Enterprise SIEM solution within Archon customer and development environments
    • Develop and design Elasticsearch cluster environments within a virtualized distributed environment to meet operational objectives
    • Operate and author playbooks for automation platforms to include Red Hat Ansible, NTS Mantle, and HashiCorp Terraform within the context of Graylog Enterprise
    • Author playbooks directly supporting tactical warfighter operations use cases including mission communications kits
    • Troubleshoots and provides consulting, technical guidance, information and support to Information Technology Operations, company management, and departmental clients
    • Design solutions and baselines to operational needs within the capacity and operational limitations of installed equipment and technologies
  • Interact with Archon customers and engineers with the initial setup and configuration of Archon solutions in external network constrained environments.
  • Self-starter, proactive, and must be able to handle multiple simultaneous task

Qualifications

    • 15+ years of experience performing complex technology analysis related to Information Technology and Information Security, within a U.S. Government environment.
    • 10+ years of experience managing IT security teams
    • 5-8+ years of experience with Graylog Enterprise within an operational environment
    • Solid understanding of NGINX web server advanced configurations
    • Considerable knowledge related to Grafana virtualization dashboards with the ability to create complex custom views using Elasticsearch databases as a visualization source
    • Significant hands-on experience leading internal or external security audits and assessments
    • Full technical knowledge of all phases of Information Technology operations
    • Significant knowledge of Ansible playbook authoring and editing to deploy solutions with the predicted outcome
    • In depth knowledge of Red Hat, VMware, and Microsoft Operating Systems
    • Detail oriented and organized; able to understand and articulate network evaluation criteria and be exact in assessments
    • Must closely follow network or systems protocols and methodology
    • Reviews the work of others and is able to detect errors or needed modifications
    • Solid understanding of Data Center Architectures and design principles 
    • Highly experienced with U.S. Department of Defense and Intelligence Community policies and protocols



Desired Qualifications:

    • Experience in NSA’s Commercial Solutions for Classified (CSfC) or related Cross Domain technologies (Archon, AFRL SecureView, Forcepoint Trusted Thin Client, etc.)
    • Desirable Certifications/Licenses: CompTTA Security+, Comp TIA Cloud Essentials, ISC2 CISSP, Red Hat Certified Engineer (RHCE).