Responsibilities
Arcfield is seeking experienced an Information Technology (IT) Systems Engineer/Administrator specializing in cloud services, responsible for applying technical/functional solutions to several projects, leveraging capabilities and sharing/seeking knowledge and information across the organization.
As part of a cross-functional team, the position will optimize and secure classified IT infrastructure(s) supporting customers operating within a Sensitive Compartmented Information Facility (SCIF), ensuring maximum availability, security, and performance for critical communication, deployment, and authentication platforms. The engineer delivers Tier II/III advanced engineering support and handles limited Tier I troubleshooting, escalations as needed, while supporting the maintenance of an active Authorization to Operate (ATO) by aligning all systems with Risk Management Framework (RMF) and ICD-503 compliance standards.
Responsibilities Include:
- Systems Administration: Provide 100% on-site management of secure server & desktop infrastructure within the classified space.
- Cloud Infrastructure and Architecture: Support the development and management of classified Commercial Cloud Services (C2S) infrastructures across several domains, seeking to implement efficiencies and maintain a high availability requirement.
- Tier II/III Advanced Support: Diagnose and resolve complex infrastructure, server, and network failures; handle specialized system outages and configuration changes (mostly in a cloud environment.
- Tier I Troubleshooting: Handle limited, escalated desktop or user issues.
- Security & Compliance Controls: Implement, monitor, and enforce technical security controls mandated by NIST SP 800-53, RMF, and Intelligence Community Directive (ICD) 503.
- Hybrid Infrastructure Management: Administer and synchronize secure on-premises servers with classified cloud environments.
- Secure Endpoint Deployment: Utilize Microsoft tools to enforce secure baselines, deploy hardened operating system images, and push mandatory security patches to multiple endpoints.
- Identity & Access Management: Administer RSA authentication tools to enforce strict Multi-Factor Authentication (MFA) and secure, identity-vetted remote access.
- Audit & Log Management: Configure and monitor continuous auditing systems (such as Splunk) to log and review user and system events for compliance verification.
- Ensure that user needs are met and enhance customer experience:
- Assist with strategic plans for future technical management and configuration.
- Assist with design and implement system changes to maintain security and usability posture.\
- Vulnerability Assessment: Conduct routine system scans using mandated automation tools (e.g., Nessus, ACAS), analyse findings, and execute remediation actions.
Qualifications
Required Qualifications
- Must possess and be able to maintain a TS/SCI with Poly
- US Citizenship is required.
- Bachelor's degree and 10-12 years of experience, OR Master's degree and 8-10 years of experience, or PhD and 5-7 years experience, OR Associate's degree and 14 years of experience, OR HS diploma/GED and 16 years of experience.
- Minimum of 5 years of experience working in the IC and/or DoW.
- Degree in Cybersecurity, Information Technology, Computer Science, OR equivalent technical experience.
- DoD 8570/8140 IAM/IAT Level II OR III certification (e.g., Security+, CISSP, CISM, or CASP+) is required.
- Experience administering ACAS, Nessus, and Splunk vulnerability and logging scanners.
- Deep operational knowledge of the Risk Management Framework (RMF) lifecycle and ICD-503 security accreditation procedures.
- Design, provision and maintain secure, resilient, and scalable C2S infrastructure using AWS Well-Architected Framework.
- Proven experience hardening systems utilizing DISA Security Technical Implementation Guides (STIGs) and Center for Internet Security (CIS) benchmarks.
- Advanced management of Active Directory (AD), specifically focused on secure Group Policy Objects (GPOs).
- Knowledge of PowerShell or Python to automate configuration baseline checks and patch verification.
- Working knowledge of networking functions, protocols, and configurations. Configure and manage complex C2S networking components, including VPC's, subnets, Route 53, transit gateways, and load balancers.
Equal Pay Act
This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.
Min: $122,788.40 Max: $213,505.20 EEO Statement
We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.