By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains.
Position OverviewThe Cybersecurity Engineer/Firewall SME will provide support at Marine Corps Base Camp Lejeune, NC. This position will to support the ongoing operation, maintenance, and administration of Industrial Control Systems (ICS) and Operational Technology (OT) solutions at the FRCS Cyber Operations Group. This position focuses on ensuring network security, configuring firewalls, and maintaining compliance with Risk Management Framework (RMF) requirements within a mission-critical environment.
Responsibilities Manage and maintain ICS/OT systems, including BAS, W&WW, HVSCADA, Metering, Lighting, and other systems as specified by CLNC PWD and FRCS Cyber Operations GroupConduct inspections of new and existing sites (e.g., buildings and other physical locations) to evaluate the deployment of ICS/OT Supervisory ControllersProvide survey results to CLNC PWD to facilitate the integration of new systems into existing infrastructureAssess Supervisory Controllers to ensure proper installation and configuration in accordance with DoD, DoN, and USMC cybersecurity standardsEstablish and maintain a representative Testbed model of correct Supervisory Controller installationsConfigure firewalls in compliance with RMF "Type" ATO/ATC standardsDesign, deploy, and maintain firewall rules and configurations to secure ICS/OT trafficAssist in the architecture and administration of Nutanix Hyperconverged Virtual environmentsSupport the administration of ICS/OT-related servers and applications in Testbed, Preproduction, and Production environmentsPerform other duties as assigned Required Experience/Qualifications Knowledgeable in securing multiple operating systems and other networked devices using appropriate DISA STIG’s and SRG’sExperience with creating and maintaining PKI (Public Key Infrastructure) to be used for secure IPsec VPN connectionsExperience with Palo Alto firewalls in an ICS/OT environmentExpert in Raspberry PI security and configuration or equivalent deviceKnowledgeable of FIPS 140-2 IPSec configurations including encryption types, key generation/storage, and configuring tunnels in a Hub-and-Spoke architectureExperience with building, securing, and accrediting Linux servers and devicesExpert in writing policies and procedures for the secure configuration, installation, and management of firewalls and Encrypt/Decrypt devices on the MCEN in support of the ICS/OT “Type” ATO/ATCProfessional Certifications (Required) Preferred Experience/Qualifications Professional Certifications (Desired):ITILv4 FoundationsICS-VLP Certificate 210W-01 – 10RMF Training (USMC specific) Special Requirements/Security ClearanceDoD Secret Security Clearance Required
Options Apply for this job onlineApplyShareRefer this job to a friendRefer Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeedBy Light recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:
Medical, Dental & Vision Coverage Wellness Program 401(k) Matching Disability (Short Term & Long Term) Employee Assistance Program Life Insurance Education & Training Generous Leave Policy (11 Federal Holidays, PTO, and Military Leave)By Light is an Equal Opportunity and Affirmative Action Employer. All qualified candidates will receive consideration regardless of gender, race, veteran status, disability, and any other protected class in accordance with federal, state and local laws.
Application FAQsSoftware Powered by iCIMS
www.icims.com