5 days ago

Job Description

Bering-Alaka'ina Holdings, LLC is looking for a skilled Commercial Solutions for Classified (CSfC) Network Engineer to provide Information Technology (IT support services) to a customer in Honolulu, Hawai''''i.

DESCRIPTION OF RESPONSIBILITIES:

  • Configure, deploy, and maintain multi-layered CSfC secure enclaves conforming strictly to NSA Capability Packages (e.g., MSC, MA, and CP).
  • Maintain and optimize Inner and Outer Virtual Private Network (VPN) tunnels utilizing diverse IPsec implementations and Suite B / CNSA cryptographic algorithms.
  • Configure and harden enterprise networking hardware, including next-generation firewalls (NGFW), enterprise routers, switches, and certificate management systems.
  • Manage and maintain Public Key Infrastructure (PKI) components, certificate revocation lists (CRLs), Online Certificate Status Protocol (OCSP) responders, and hardware security modules (HSMs).
  • Conduct continuous network monitoring, traffic analysis, performance tuning, and rapid troubleshooting of routing protocol anomalies (BGP, OSPF, EIGRP) and cryptographic failures.
  • Partner with cybersecurity compliance and auditing teams to conduct Security Technical Implementation Guide (STIG) compliance reviews and remediate Plan of Action and Milestones (POA&M) findings.
  • Author and update standard operating procedures (SOPs), network topology diagrams, continuous monitoring plans, and disaster recovery runbooks.
  • Provide escalation support to Tier II/III technicians during operational outages or security incident response events.
  • Other duties as assigned by Supervisor.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

  • Accredited Masters or PHD in Computer Science, Information Technology, Data Science, Cybersecurity, Software Engineering or a related technical discipline.
  • DoD Directive 8140 Baseline: IAT Level III (Advanced) = CompTIA SecurityX/CASP, CCNA, CCNP Security, CCSP, GCED, CGIA, GCLD, GDSA, GFACT.
  • Computing Environment / Vendor Certifications: Professional-Level Network Certification = Cisco Certified Network Professional (CCNP Enterprise or Security), Aruba Certified Design/Mobility Professional, or Juniper JNCIP
  • Specialized Training: Cryptography & Security = Formal training in NSA CSfC architectures, Suite B / CNSA standards, and PKI/CA administration.

REQUIRED SKILLS AND EXPERIENCE:

  • Three plus (3+) years directly administering double-tunnel IPsec architectures, Suite B/CNSA cipher suites, Certificate Authorities, and Key Management Systems. Direct experience authoring and submitting NSA CSfC registration packages and deviation waivers.
  • Seven plus (7+) years hands-on experience configuring Cisco, Aruba, or Juniper switches, routers, and IPsec aggregators. Deep expertise in dynamic routing (BGP, OSPF), VXLAN, MPLS, and high-availability gateway protocols.
  • Advanced configuration of Palo Alto Networks, Fortinet, or Cisco Firepower firewalls, IDS/IPS, and web proxies. Hands-on experience with F5 BIG-IP / SSL Orchestrator and hardware load balancers.
  • Proven experience applying DISA STIGs, SCAP tools, and resolving vulnerability scans (Nessus/ACAS). Familiarity with RMF (Risk Management Framework) lifecycle controls (NIST SP 800-37 / 800-53).
  • Advanced packet analysis using Wireshark, tcpdump, and network performance monitoring platforms (Elastic, Cribl). Scripting experience (Python, Bash, or Ansible) for network automation and configuration verification.
  • Primary day position with required participation in on-call operational rotation to customer escalations.

REQUIRED CITIZENSHIP AND CLEARANCE:

  • Must be a U.S. Citizen
  • Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).

COMPENSATION DETAILS:

  • $160,000.00
  • The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alakaina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Keaki Technologies, LLC; Laulima Government Solutions, LLC; Kpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kkaha Solutions, LLC; and Pololei Solutions, LLC.

For additional information, please visit www.beringalakaina.com

#LI-JS1

#ClearanceJobs

Numbers & Facts

LocationHI

Skills

  • Analysis Skillsunmatched
  • Ansibleunmatched
  • Auditingunmatched
  • Automationunmatched
  • BGPunmatched
  • BGP Routing Protocolunmatched
  • Bash Scriptingunmatched
  • CCNA - Cisco Certified Network Associateunmatched
  • CCNP - Cisco Certified Network Professionalunmatched
  • CCSP - Cisco Certified Security Professionalunmatched
  • Certificate Authoritiesunmatched
  • Cisco Certificationsunmatched
  • Cisco Network Systemsunmatched
  • CompTIA - Computing Technology Industry Associationunmatched
  • Computer Scienceunmatched
  • Computer Securityunmatched
  • Computer Systemsunmatched
  • Cryptographyunmatched
  • Cryptography Algorithmsunmatched
  • Customer Escalationsunmatched
  • Customer Support/Serviceunmatched
  • Data Scienceunmatched
  • Defense Information Systems Agency (DISA)unmatched
  • Digital Certificatesunmatched
  • Disaster Recoveryunmatched
  • DoD Directive 8140unmatched
  • DoD Directive 8570unmatched
  • EIGRP (Enhanced IGRP)unmatched
  • Enterprise Protectionunmatched
  • F5 BIG-IPunmatched
  • Firewallsunmatched
  • Governmentunmatched
  • High Availabilityunmatched
  • IAT - Information Assurance Technicalunmatched
  • IPsec (IP Security)unmatched
  • Identify Issuesunmatched
  • Incident Responseunmatched
  • Information Technology & Information Systemsunmatched
  • Internet Securityunmatched
  • Intrusion Detection Systemsunmatched
  • Intrusion Prevention Systemsunmatched
  • JNCIP - Juniper Networks Certified Internet Professionalunmatched
  • Juniper Networks Product Familyunmatched
  • Juniper Routersunmatched
  • Load Balancingunmatched
  • MPLS (Multi-Protocol Label Switching)unmatched
  • National Security Agency (NSA)unmatched
  • Nessusunmatched
  • Network Architecture/Engineeringunmatched
  • Network Configuration Managementunmatched
  • Network Monitoringunmatched
  • Network Performance/Analysisunmatched
  • Network Routersunmatched
  • Network Switchingunmatched
  • Network System Hardwareunmatched
  • Network Topologyunmatched
  • Network Traffic Analysisunmatched
  • On Callunmatched
  • Open Shortest Path First Protocol (OSPF)unmatched
  • Operations Security (OPSEC)unmatched
  • Performance Tuning/Optimizationunmatched
  • Public Key Infrastructure (PKI)unmatched
  • Public Key Infrastructure (PKI) Standardsunmatched
  • Python Programming/Scripting Languageunmatched
  • Risk Management Framework (RMF)unmatched
  • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
  • Scripting (Scripting Languages)unmatched
  • Security Attacksunmatched
  • Software Engineeringunmatched
  • Standard Operating Procedures (SOP)unmatched
  • Technical Supportunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • United States Citizenunmatched
  • VPN (Virtual Private Network)unmatched
  • Vulnerability Scannersunmatched
  • Wireshark (Ethereal)unmatched
  • Writing Skillsunmatched
  • tcpdumpunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder