Aimed at senior systems engineering professionals with deep defense sector experience who can architect and maintain secure CSfC infrastructure.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Platinum Technologies via Lever
Who we are.
Platinum Technologies is a Northern Virginia based integrated solutions firm that specializes in PaaS, Cybersecurity & AI Platform development for the Defense and Federal Sectors. Our team solves hard problems and helps our Mission Partners achieve their goals. If you are self-motivated, possess demonstrated learning agility, and are passionate about delivering high-quality work products – we want to hear from you.
We lead with technical expertise, but that is just the tip of the iceberg – the ‘Why’ matters. At Platinum, we don’t hire people to just do a job. We provide professional and leadership development to complement our self-motivated domain experts. Our teammates are dot-connecting leaders that operate in a mutually accountable environment to deliver thought leadership, expert technical analysis, and quality execution for our clients.
You.
Platinum Technologies currently has an opportunity for a Systems Engineer SME supporting the Defense Threat Reduction Agency (DTRA) Integrated Information Technology Support Services (I3TS) digital modernization program. In this role, you will work with government and technical leadership to strengthen mission-critical systems, improve operational efficiency, and maintain secure Commercial Solutions for Classified (CSfC) infrastructure. This role is located at Fort Belvoir, VA.
Candidate must hold an active TS/SCI clearance at the time of consideration.
What you get to do.
- Architect, deploy, and maintain CSfC infrastructure across Black, Gray, and Red networks.
- Design and sustain multilayer CSfC architectures aligned with NSA Data-at-Rest (DAR) and Mobile Access (MA) Capability Packages.
- Architect and administer certificate authorities, OCSP responders, public key infrastructure (PKI), and hardware security modules (HSMs) consistent with CSfC key management requirements.
- Manage VMware vSphere/ESXi or Nutanix AHV hyperconverged environments, including vSAN or distributed storage, and design resilient air-gapped backup and disaster recovery solutions.
- Deploy and administer hardened Windows Server (Active Directory, DNS, Group Policy) and Red Hat Enterprise Linux systems.
- Implement tamper-resistant centralized syslog collection and forwarding from network devices, hypervisors, and operating systems to enterprise SIEM platforms, including cross-domain log forwarding.
- Build and maintain automated operating-system deployment and gold-image workflows using Microsoft Configuration Manager (MCM/SCCM) for CSfC end-user devices.
- Apply and validate patches and DISA STIGs, conduct vulnerability scans, track IAVMs, and remediate findings to maintain Authorization to Operate (ATO).
Required Skills.
- Bachelor’s degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or a related STEM field, with 12–15 years of relevant experience; or a master’s degree with 10–13 years of relevant experience. A technical doctorate or equivalent combination of experience, education, and training may be considered.
- 12+ years of progressive systems engineering experience in DoD/DoW, federal, or defense contractor enterprise environments.
- Active TS/SCI security clearance at time of consideration.
- Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP).
- Active computing environment certification in at least one of the following: VMware VCP/VCAP, Nutanix NCP, Red Hat Certified Engineer (RHCE), or Microsoft Certified: Windows Server Hybrid Administrator Associate.
- Direct experience drafting CSfC Key Management Plans (KMPs) and Continuous Monitoring Plans (CMPs) for NSA CSfC PMO approval.
- Proficiency with PowerShell, Bash, and Ansible for automated STIG remediation, configuration drift detection, and certificate deployment.
- Advanced configuration of Rsyslog or Syslog-ng and log-forwarding architectures to enterprise SIEM platforms such as Splunk or Elastic.
The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information.