{"id":3570276,"url":"https://alion.io/job/resource-management-concepts-infrastructure-engineerarchitect","title":"Infrastructure Engineer/Architect","company":{"id":5221,"name":"Resource-Management-Concepts","domain":"resource-management-concepts.com","url":"https://alion.io/company/resource-management-concepts","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":88,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-11-01T06:10:25Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charleston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":219000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":589},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Kubernetes","optional":true},{"name":"OpenShift","optional":true},{"name":"PKI","optional":true}],"status":"live","first_seen_at":"2026-10-31T16:01:49Z","employer_posted_date":"2026-10-31","last_verified_at":"2026-11-01T14:56:02Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.\nRMC is seeking a Denied, Disrupted, Intermittent, and Limited (DDIL) Subject Matter Expert to guide strategy and architecture for secure mission services operating under constrained connectivity. This role focuses on operating at the intersection of tactical communications, systems engineering, and advanced cybersecurity, this role addresses the unique technical challenges of enforcing Zero Trust principles (continuous verification, least privilege access, explicit risk-based attestation) when continuous reachback to enterprise identity providers, policy engines, and cloud trust brokers is degraded or entirely severed. The engineer will establish resilient Policy Enforcement Points (PEP) and decentralized Policy Decision Points (PDP), architect edge-capable Identity, Credential, and Access Management (ICAM) solutions, and optimize cryptographic overhead across constrained tactical data links.\nWe are looking for someone who has designed, evaluated, or fielded systems for these conditions and understands the tradeoffs involved. The SME will help Government stakeholders and engineering teams determine which capabilities must operate locally, what information can be cached or replicated, how long that information remains trustworthy, and how systems reconnect safely. Success requires sound technical judgment grounded in mission needs and experience beyond traditional enterprise availability planning.\nThis position is contingent on contract award and position availability. It is a full-time, on-site role at a Government facility in Charleston, SC.\nWhat You’ll Do:\nDevelop DDIL strategies, architectural approaches, and implementation roadmaps for mission applications and supporting security services.\nWork with mission owners to define operational scenarios, connectivity constraints, mission priorities, and acceptable levels of degraded service.\nTranslate those scenarios into requirements for local autonomy, bandwidth use, latency, outage duration, synchronization, and recovery.\nDefine which identity, authorization, directory, credential, and data protection capabilities must remain available without enterprise reach back.\nArchitect local identity and attribute services, including virtual directories and approved caching of security information.\nEstablish approaches for cached attribute freshness, credential expiration, revocation awareness, authorization policy updates, and operation when authoritative sources cannot be reached.\nEvaluate access control tradeoffs, including when services should deny access, permit bounded local operation, or require additional safeguards.\nDesign synchronization and reconnection approaches that address conflicting updates, stale identity data, audit records, and restoration of enterprise consistency.\nDefine dependencies among applications, identity providers, policy services, directories, encryption services, and key management infrastructure.\nAssess data placement, replication, and protection requirements across connected and disconnected environments, including approved cross-domain interfaces.\nDevelop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased implementation recommendations.\nSupport agreements and approval documentation governing the caching and use of identity and security attributes.\nGuide prototypes and demonstrations that validate architectural assumptions under representative network impairments.\nDefine measurable acceptance criteria and help teams evaluate mission continuity, security behavior, and recovery during connectivity loss and restoration.\nCoordinate with Government stakeholders, mission partners, security personnel, and engineering teams to resolve architectural gaps and guide implementation.\nRequirements\nActive TS/SCI clearance with the ability to obtain a CI polygraph.\nExpertise designing, evaluating, or fielding systems for denied, disrupted, intermittent, or limited connectivity (DDIL).\nExperience architecting disconnected operations, local processing, and eventual synchronization.\nAbility to translate operational constraints into requirements, architecture decisions, and testable performance criteria.\nKnowledge of distributed systems, including consistency, replication, caching, conflict resolution, and recovery.\nExperience managing offline identity, authentication, authorization, and credential dependencies.\nUnderstanding of risks from stale attributes, delayed revocations, expired credentials, and unavailable policy/key services.\nAbility to assess bandwidth, latency, packet loss, and availability impacts.\nExperience developing technical strategies, architecture documentation, alternatives analyses, and roadmaps.\nAbility to explain tradeoffs and risks to Government leaders and guide multidisciplinary engineering teams.\nExperience deploying local PEPs and lightweight PDPs on edge appliances and dismounted kits.\nExperience with modeling, simulation, and HWIL testing of tactical link degradation, EW effects, and packet loss.\nDesired Skills\nIntelligence Community experience.\nBachelor’s or master’s degree.\nOperational experience in tactical, deployed, expeditionary, or edge environments.\nICAM, virtual directories, federation, and local identity/attribute caching.\nAttribute-based access control, local enforcement, bounded offline access, and policy synchronization.\nTDF, data tagging, encryption, and disconnected access enforcement.\nDisconnected PKI, certificate validation, credential renewal, and key availability.\nStore-and-forward messaging, durable queues, retries, duplicate handling, and reconnection reconciliation.\nApproved cross-domain and mission-partner identity/data exchanges.\nAWS, Kubernetes, OpenShift, and enterprise-to-edge deployments.\nNetwork impairment testing, fault injection, and degraded-mode demonstrations.\nZero Trust controls adapted for intermittent connectivity.\nSoftware-defined microsegmentation, overlay networks, and dynamic perimeters across tactical transports, including HF/VHF/UHF, SATCOM, mesh, and 5G.\nBenefits\nAt RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.\nRMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.\nSalary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.","description_format":"text","description_chars":7177,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-31T16:01:49Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/resource-management-concepts-infrastructure-engineerarchitect","json_url":"https://alion.io/job/resource-management-concepts-infrastructure-engineerarchitect.json","meta":{"generated_at":"2026-11-01T15:44:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24073,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5221},"rest":"https://alion.io/mcp/rest/get_company?id=5221"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fresource-management-concepts-infrastructure-engineerarchitect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fresource-management-concepts-infrastructure-engineerarchitect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fresource-management-concepts-infrastructure-engineerarchitect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/resource-management-concepts-infrastructure-engineerarchitect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fresource-management-concepts-infrastructure-engineerarchitect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3570276}},{"tool":"search_jobs","arguments":{"company":"resource-management-concepts.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3570276},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}