> Markdown version of [/jobs/ext/3549936-cybersecurity-engineer-csfc-specialist-ts](https://www.wearedevelopers.com/jobs/ext/3549936-cybersecurity-engineer-csfc-specialist-ts). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer (CSfC Specialist) (TS)

- **Company:** Koniag Services, Inc.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $116,350.0 - $210,325.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Comptia Pentest+ CE, Security Information and Event Management, Systems Integration, Transport Layer Security, Information Technology, ArcSight Event Correlation, Cyber Warfare, Vulnerability Analysis
- **Published:** September 30, 2026
- **Apply:** https://www.careerjet.com/job/us0e3cae8c55e467baaa936ebd0514924e/eaa

## About the Role

* Active TS/SCI clearance.
 * Minimum of 7 years of cybersecurity experience, including at least 3 years of hands-on experience with NSA Commercial Solutions for Classified (CSfC) capability packages.
 * DoD 8140 work role qualification: 521 - Cyber Defense Infrastructure Support Specialist.
 * Bachelor's degree in Cybersecurity, Computer Science, or a related field (preferred but not required).
 * At least one of the following required certifications:

 * Security+
 * SSCP
 * CySA+
 * PenTest+
 * CASP+
 * GCIH
 * CISSP
 * GSLC
 * CISSP (or CASP+ + GCIH combination)

Technical Knowledge Requirements:

 * Strong understanding of:

 * CSfC standards and capability package guidance
 * DAR and DiT architecture design
 * Encrypted tunneling technologies (IPsec, TLS, VPN)
 * Enterprise SIEM monitoring and security event analysis
 * Security controls implementation and compliance reporting

Preferred Certifications (Plus):

 * GCIH
 * GCIA
 * CASP+
 * EDR vendor certifications (Microsoft Defender, CrowdStrike, or similar)

Preferred Experience:

 * Experience designing and deploying NSA-compliant CSfC solutions in DoD or IC environments.
 * Experience integrating and automating security monitoring across heterogeneous environments.
 * Familiarity with risk management frameworks, secure configuration baselines, and accreditation processes.

## Description

We are seeking a Cybersecurity Engineer specializing in Commercial Solutions for Classified (CSfC) to design, implement, and maintain secure communication architectures using layered commercial products meeting NSA's CSfC standards. This role requires deep expertise in Data-at-Rest (DAR) and Data-in-Transit (DiT) compliant architectures, as well as strong hands-on experience deploying, integrating, and assessing CSfC components in secure operational environments. The candidate will support mission operations at Joint Base Anacostia-Bolling and must maintain an active TS/SCI clearance., * Design, implement, and maintain secure communication solutions using layered commercial technologies aligned with NSA CSfC standards.

 * Serve as the subject matter expert for CSfC capability packages, including solution design, documentation, configuration, and compliance validation.
 * Develop and maintain DAR and DiT architectures that conform to NSA guidelines and aligned security frameworks.
 * Integrate encrypted tunneling solutions within enterprise and tactical environments.
 * Support SIEM monitoring, event correlation, and security incident response activities.
 * Conduct risk assessments, vulnerability analysis, and compliance checks on CSfC-related systems.
 * Create and maintain engineering documentation, configuration guides, diagrams, and accreditation artifacts.
 * Coordinate with system owners, cybersecurity teams, and government stakeholders to ensure CSfC solutions meet mission and security requirements.
 * Support lifecycle management, including upgrades, patching, and modernization of CSfC solutions.