Network & Cybersecurity Engineer | C-sUAS

Description

Sherpa 6 is seeking an experienced Network Engineer with a strong cybersecurity background to provide direct technical support to the JIATF 401 Command and Control (C2) Capability Manager. The engineer will support the integration of tactical communications systems, mission networks, command-and-control applications connecting C-UAS sensors, data platforms, and authorized effectors. This position serves as the C2 Capability Manager's lead technical advisor for network architecture.

The engineer will translate operational C2 requirements into a network architecture that is secure, interoperable, and supportable architectures for Department of War enterprise, tactical, classified, unclassified, and mission-partner environments. The network engineer will also ensure and lead cybersecurity compliance design, oversee the Risk Management Framework (RMF) process, and work to ensure the solution is achieves an Authorization to Operate (ATO).

Active Top Secret security clearance with eligibility and ability to obtain SCI access.

Up to 50%

• Develop network diagrams, data-flow and authorization-boundary diagrams, IP address plans, port and protocol matrices, interface-control documents, and connection requirements.
• Design, configure, and troubleshoot routing, switching, VLANs, firewalls, VPNs, SD-WAN, SATCOM, cellular, terrestrial WAN, wireless, and tactical-radio interfaces.
• Design secure architectures connecting C-UAS sensors, track-management services, C2 applications, mission databases, tactical radios, data platforms, and authorized effectors.
• Support C2 integration with NIPRNet, SIPRNet, tactical networks, laboratory environments, Mission Partner Environments, and other authorized Department of War networks.
• Provide direct network engineering and cybersecurity support to the JIATF 401 C2 Capability Manager.
• Advise the C2 Capability Manager on network architecture, cybersecurity risk, authorization strategy, interoperability, integration readiness, and technical courses of action.
• Translate operational C2 requirements and mission threads into network, cybersecurity, interface, and data-exchange requirements.
• Evaluate C2 systems for interoperability, cybersecurity, scalability, resiliency, latency, availability, data integrity, and operational suitability.
• Define secure, vendor-neutral interfaces and data exchanges among sensors, C2 platforms, data fabrics, AI-enabled applications, and authorized effectors.
• Develop and maintain C2 architecture baselines, interface standards, approved configurations, and system-of-systems documentation.
• Lead or support the full RMF lifecycle for C2 capabilities and supporting network infrastructure in accordance with applicable Department of War and service policies.
• Develop, update, and maintain eMASS authorization packages, including System Security Plans, control implementation statements, inventories, diagrams, risk assessments, Security Assessment Reports, POA&Ms, and continuous-monitoring evidence.
• Determine applicable security controls and overlays based on system categorization, information types, authorization boundaries, operating environments, and mission requirements.
• Coordinate RMF activities with the C2 Capability Manager, system owners, ISSMs, ISSOs, Security Control Assessors, Authorizing Officials, network service providers, program offices, and vendors.
• Support Interim Authorizations to Test, Authorizations to Operate, Interim Authorizations to Operate, Authorities to Connect, reciprocity decisions, and other required approvals.
• Develop authorization strategies that enable rapid C2 integration, testing, operational assessment, fielding, and sustainment.
• Collect, review, organize, and maintain objective evidence required for security-control validation and authorization decisions.
• Review vendor cybersecurity documentation and identify gaps that could delay integration, connection approval, testing, or operational deployment.
• Implement and validate DISA Security Technical Implementation Guides and secure configuration baselines.
• Conduct or coordinate ACAS, Nessus, SCAP, or other approved vulnerability assessments; analyze findings, coordinate remediation, document residual risk, and maintain POA&M entries.
• Support Zero Trust implementation through identity management, least-privilege access, device compliance, segmentation, data protection, logging, monitoring, and continuous validation.
• Troubleshoot connectivity,…