Infrastructure Engineer/Architect - DDIL SME

Job summary

Guides strategy and architecture for secure mission services operating with denied, disrupted, intermittent, or limited connectivity, adapting Zero Trust controls when enterprise identity, policy, and cloud services are unavailable. Develops DDIL architectures and implementation roadmaps; defines local identity, authorization, caching, synchronization, and data-protection capabilities; and validates designs through prototypes and testing that simulate tactical link degradation, electronic warfare effects, and packet loss.

Qualifications

• Active TS/SCI clearance and ability to obtain a Counterintelligence (CI) Polygraph.
• Expertise designing, evaluating, or fielding systems for denied, disrupted, intermittent, or limited connectivity.
• Experience developing architectures for disconnected operation, local processing, and eventual synchronization with authoritative services.
• Ability to translate operational constraints into technical requirements, architectural decisions, and testable performance criteria.
• Understanding of distributed systems, including consistency, replication, caching, conflict resolution, and failure recovery.
• Experience addressing identity, authentication, authorization, or credential dependencies when enterprise services are unavailable.
• Understanding of security risks involving stale attributes, delayed revocation, expired credentials, and unavailable policy or key services.
• Experience deploying localized PEPs and lightweight PDPs on edge compute appliances and dismounted kits.
• Experience with modeling, simulation, and hardware-in-the-loop testing of tactical link degradation, electronic warfare effects, and packet-loss profiles.
• Experience supporting tactical, expeditionary, edge, or other mission environments with constrained reachback.
• Experience with ICAM, virtual directories, identity federation, and local identity and attribute caching.

Responsibilities

• Develop DDIL strategies, architectures, and implementation roadmaps for mission applications and security services.
• Define operational scenarios, connectivity constraints, mission priorities, and acceptable degraded-service levels with mission owners.
• Translate operational scenarios into requirements for local autonomy, bandwidth, latency, outage duration, synchronization, and recovery.
• Define identity, authorization, directory, credential, and data-protection capabilities that must remain available without enterprise reachback.
• Architect local identity and attribute services, virtual directories, and approved security-information caching.
• Establish policies for attribute freshness, credential expiration, revocation awareness, authorization updates, and disconnected operation.
• Design synchronization and reconnection approaches for conflicting updates, stale identity data, audit records, and enterprise consistency.
• Assess data placement, replication, protection, and approved cross-domain interfaces.
• Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased recommendations.
• Guide prototypes and demonstrations, define acceptance criteria, and assess mission continuity, security behavior, and recovery during connectivity loss and restoration.
• Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation.

Skills

Industry

Security clearance

Relocation