Cyber Security Architect

Company Overview

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains.

This is a proposal position.

Position Overview

The Cybersecurity Architect will provide support at Marine Corps Base Camp Lejeune, NC. This position will assist in overseeing the security, operation, and administration of Industrial Control Systems (ICS) and Operational Technology (OT) solutions within the FRCS Cyber Operations Group. The ideal candidate will have a robust understanding of ICS / OT environments, Risk Management Framework (RMF) processes, and compliance with DoD, DoN, and USMC cybersecurity policies.

Responsibilities

• Manage the ongoing operation, maintenance, and administration of ICS / OT systems, including Building Automation Systems (BAS), Water & Wastewater (W&WW) systems, HVSCADA, Metering, Lighting, and other systems as defined by CLNC PWD and the FRCS Cyber Operations Group
• Conduct inspections and surveys of new and existing physical sites (buildings and locations) for ICS / OT Supervisory Controllers
• Deliver survey findings to CLNC PWD to support the addition of new ICS / OT systems into the existing architecture
• Assess and verify the installation and configuration of Supervisory Controllers to meet DoD, DoN, and USMC standards
• Establish and maintain a model of properly installed ICS / OT Supervisory Controllers in a Testbed environment for reference and testing purposes
• Configure Encrypt / Decrypt devices to establish secure connections to firewalls over MCEN using approved IPSec VPNs
• Ensure new Supervisory Controllers connect securely via VPN and integrate successfully with the designated server
• Monitor and update Encrypt / Decrypt devices to comply with operational and cybersecurity requirements
• Design, deploy, and administer Nutanix Hyperconverged Virtual environments
• Configure and maintain firewalls in alignment with RMF "Type" ATO / ATC requirements
• Perform other duties as assigned

Required Experience / Qualifications

Preferred Experience / Qualifications

Special Requirements / Security Clearance

DoD Secret Clearance Required

#J-18808-Ljbffr