Network Engineer

Commercial Solutions For Classified (CSfC) Network Engineer

Bering-Alaka'ina Holdings, LLC is looking for a skilled Commercial Solutions for Classified (CSfC) Network Engineer to provide Information Technology (IT support services) to a customer in Honolulu, Hawai'i.

Description Of Responsibilities:

• Configure, deploy, and maintain multi-layered CSfC secure enclaves conforming strictly to NSA Capability Packages (e.g., MSC, MA, and CP).
• Maintain and optimize Inner and Outer Virtual Private Network (VPN) tunnels utilizing diverse IPsec implementations and Suite B / CNSA cryptographic algorithms.
• Configure and harden enterprise networking hardware, including next-generation firewalls (NGFW), enterprise routers, switches, and certificate management systems.
• Manage and maintain Public Key Infrastructure (PKI) components, certificate revocation lists (CRLs), Online Certificate Status Protocol (OCSP) responders, and hardware security modules (HSMs).
• Conduct continuous network monitoring, traffic analysis, performance tuning, and rapid troubleshooting of routing protocol anomalies (BGP, OSPF, EIGRP) and cryptographic failures.
• Partner with cybersecurity compliance and auditing teams to conduct Security Technical Implementation Guide (STIG) compliance reviews and remediate Plan of Action and Milestones (POA&M) findings.
• Author and update standard operating procedures (SOPs), network topology diagrams, continuous monitoring plans, and disaster recovery runbooks.
• Provide escalation support to Tier II/III technicians during operational outages or security incident response events.
• Other duties as assigned by Supervisor.

Required Degree/Education/Certification:

• Accredited Masters or PHD in Computer Science, Information Technology, Data Science, Cybersecurity, Software Engineering or a related technical discipline.
• DoD Directive 8140 Baseline: IAT Level III (Advanced) = CompTIA SecurityX/CASP, CCNA, CCNP Security, CCSP, GCED, CGIA, GCLD, GDSA, GFACT.
• Computing Environment / Vendor Certifications: Professional-Level Network Certification = Cisco Certified Network Professional (CCNP Enterprise or Security), Aruba Certified Design/Mobility Professional, or Juniper JNCIP
• Specialized Training: Cryptography & Security = Formal training in NSA CSfC architectures, Suite B / CNSA standards, and PKI/CA administration.

Required Skills And Experience:

• Three plus (3+) years directly administering double-tunnel IPsec architectures, Suite B/CNSA cipher suites, Certificate Authorities, and Key Management Systems. Direct experience authoring and submitting NSA CSfC registration packages and deviation waivers.
• Seven plus (7+) years hands-on experience configuring Cisco, Aruba, or Juniper switches, routers, and IPsec aggregators. Deep expertise in dynamic routing (BGP, OSPF), VXLAN, MPLS, and high-availability gateway protocols.
• Advanced configuration of Palo Alto Networks, Fortinet, or Cisco Firepower firewalls, IDS/IPS, and web proxies. Hands-on experience with F5 BIG-IP / SSL Orchestrator and hardware load balancers.
• Proven experience applying DISA STIGs, SCAP tools, and resolving vulnerability scans (Nessus/ACAS). Familiarity with RMF (Risk Management Framework) lifecycle controls (NIST SP View phone number on click.appcast.io).
• Advanced packet analysis using Wireshark, tcpdump, and network performance monitoring platforms (Elastic, Cribl). Scripting experience (Python, Bash, or Ansible) for network automation and configuration verification.
• Primary day position with required participation in on-call operational rotation to customer escalations.

Required Citizenship And Clearance:

• Must be a U.S. Citizen
• Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI).

Compensation Details:

• $160,000.00
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka'ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees.

As a part of BSNC, Bering-Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka'ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke'aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po'okela Solutions, LLC; Kīkaha Solutions, LLC; and Pololei Solutions, LLC.