Cyber Range Engineer

Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.

We are looking for a Senior Cyber Range Engineer for the Joint Cyber Training Enterprise (JCTE) who will be a subject matter expert for cyber range validation and range control. The successful candidate will be able to provide senior expert guidance on cyber range development and execution, systems administration, cybersecurity, and account management and address ad-hoc customer related technical requirements and synchronize priorities across the platform's functional areas. The ability to thrive within high pressure situations and drive relevant teams to take the right actions are a must.

The position is full time on-site Joint Base San Antonio, TX.

Support the execution of cybersecurity training and testing events within cyber ranges.
• Support the implementation of offensive based cyber range content, to include virtual machines, networks, hardware in the loop, training materials, applications and scenarios.
• Provide customer facing support for red cell exercise events and develop visual products tracking priorities for small to large multi-national cyber exercise.
• Assist content developers and managers in the configuration and employment of red cell applications in support of training events and exercises.
• Support the development, testing, documentation, fielding and support of complex cyber and IT training systems and equipment.
• Ensure the highest quality of task completion, meeting contractual performance criteria and deliverables in accordance with the contract.
• Support cyber range event design and execution.
• Provide subject matter expertise on architecture, authentication and system security.
• Fulfill regular on-call responsibilities.
• Drive continuous process improvement across all event activities.
• Provide expert-level IT, virtual environment, and network support functions.
• Interact with vendors/users/customers and developers to understand needs and operational requirements changes that will impact the production environment.

• Bachelor's degree in a technical discipline such as information technology, computer science, systems or software engineering from an accredited college or university or 6 years of relevant experience can be substituted for degree.

• Current DoD 8570 IAT Level II/III Certification, such as Security , CCNA, CISSP or equivalent or the ability to obtain within 6 months of start.

• Intermediate knowledge of the Joint Event Life Cycle (JELC) and defensive and offensive cyber tools
• Expert working knowledge of networking, to include DNS, routing, basic to advanced TCP/IP skills and troubleshooting.
• Background in MS, AD, Security Onion, and VMWare.
• Demonstrated understanding of Red Hat Enterprise Linux (RHEL) Identity Management (IdM) and Single Sign On (SSO) using Lightweight Directory Access Protocol (LDAP).
• Ability to translate cyber mission force training and mission rehearsal goals into actionable event environments.
• Must be a self-starter in a fast-paced environment and able to work with a range of engineers holding a diverse set of skills at differing levels of experience.
• Be sensitive and flexible to the needs and requirements of the customer.
• Ability to solve technical problems involving a variety of integrated software and hardware platforms.
• Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business.
• Able to prioritize multiple tasks, projects, and demands.
• 4 years of experience with CNO/CNE/CND platforms
• 5 years of experience with cyber training, validation exercises, and working with cyber protection teams (CPTs), including planning, coordinating, and execution.

• Intermediate to advanced knowledge of DNS: Authoritative vs. Recursive servers, SOA, NS, MX, A, and CNAME records.
• Intermediate to advanced knowledge of routing: OSPF static, BGP, route maps, access lists, prefix lists, advertise maps, and route weights.
• Intermediate to advanced knowledge of exchange: Edge servers, recipient e-mail addressing, mailboxes, auto-configuration for Exchange clients.
• Intermediate knowledge of Security Onion or Splunk: interface requirements, scalability landmines, Enterprise configurations (sensor and master). VMWare port properties and how they are tied to sensor ports and promiscuous modes.

Please note that pursuant to a Government contract, this specific position requires U. S. Citizenship status and a TS/SCI, security clearance and CI polygraph if requested by customer.

Occasional travel may be required up to 10% of the time.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. The above is intended to describe the general contents of and requirements for the performance of this job.

CESI recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:

• Medical, Dental & Vision Coverage
• Wellness Program
• 401(k) Matching
• Disability (Short Term & Long Term)
• Employee Assistance Program
• Life Insurance
• Education & Training
• Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)

CESI is committed to principles of inclusion and equal employment opportunity. We foster a non-discriminatory, professional work environment for all our teams. We do not discriminate based on race, color, religion, sex, pregnancy, sexual orientation, gender identity, genetic information, national origin, age, marital status, disability, or veteran status.