Senior Network Engineer

At MAG, we provide and enable real-time situational awareness to help our customers make the world smaller and safer. We are laser focused on serving our customers by providing technical expertise, operational excellence, and flawless execution. Our success is due entirely to the high caliber of employees we recruit, hire, and retain. At MAG, we look for individuals who thrive in a high-performance environment where challenges are the norm and success is expected., * Own, maintain, and configuration-control the STIG-hardened network baselines for the platform router and switching (Cisco IR1101 and IE3300 or equivalent) at the architecture and configuration-management level.

• Own the multi-path WAN automatic failover and failback architecture across cellular, commercial SATCOM, and military SATCOM and MUOS, including tracking-object logic, route precedence, and failover validation.
• Own routing, switching, virtual local area network (VLAN) segregation, and multi-enclave network separation, and enforce classification-boundary discipline so that the transport network processes encrypted black data only.
• Own the platform network's RMF and STIG benchmark posture and the artifacts that support Government accreditation.
• Integrate and configure platform compute infrastructure, including server and operating-system configuration and joining compute resources to the hardened network.
• Support bring-up and acceptance test of the integrated network baseline, and validate failover, segregation, and hardening on each build.
• Design, stand up, and administer the program office and integration-laboratory network, including local area network, wireless, internet and WAN connectivity, switching, and firewall.
• Coordinate with RF engineering on the network and internet-protocol integration of SATCOM terminals and antenna systems.

• Strong Cisco IOS and IOS-XE engineering: routing, switching, VLANs, network address translation, internet-protocol service level agreement and tracking objects, and embedded event manager.
• Experience with ruggedized platforms such as the Cisco IR1101 and IE3300 or equivalent.
• Multi-WAN automatic failover design and validation across cellular, SATCOM, and military SATCOM.
• DISA STIG benchmark hardening and RMF accreditation-support evidence development, Commercial Solutions for Classified (CSfC) architecture concepts, and multi-enclave classification separation.
• Enterprise network design and administration: local area network, wireless, firewall, and WAN.

ADDITIONAL PREFERRED SKILLS

• DoD 8140 baseline certification (for example, Security+, CCNA, or higher).
• Experience authoring RMF packages and working in eMASS.
• Experience with tactical or mobile communications and vehicle-integrated networking.
• Experience operating, hardening, or accrediting networks in SCIF or secure facility (ICD 705) environments.
• Prior U.S. military service, or direct experience supporting U.S. military operations.
• An active or current Top Secret/SCI (TS/SCI) clearance.
• Experience supporting nuclear command, control, and communications (NC3), strategic communications, or continuity-of-operations programs.

EDUCATION

Bachelor of Science in Electrical Engineering, Computer Engineering, Computer Science, Information Technology, or a related discipline. Equivalent experience will be considered.

MINIMUM YEARS OF EXPERIENCE

Minimum of 7 years of network engineering experience, including DoD network hardening and accreditation.

CERTIFICATIONS, LICENSES, AND CLEARANCE

Must hold, or be able to obtain and maintain, a U.S. Department of Defense Top Secret security clearance with Sensitive Compartmented Information access (TS/SCI). U.S. citizenship is required.

This position involves access to technical data controlled under U.S. export control regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR).

TRAVEL

Up to 25 percent, to integration, demonstration, and customer sites in CONUS and OCONUS.

PHYSICAL REQUIREMENTS AND ENVIRONMENTAL CONDITIONS

Work is performed in office, laboratory, and high-bay vehicle-integration environments. Must be able to lift up to 50 pounds and work in and around vehicles.

At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $140000 to $160000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.

The Senior Network Engineer provides network architecture, hardening, accreditation support, and enterprise and site network engineering across MAG Aerospace's U.S. European Command (USEUCOM) command and control portfolio: mobile command platforms, fixed and survivable C2 facilities, communications and terminal programs, and program offices and integration and training sites. The mobile C2 platform network is the current anchor, and the same discipline applies to facility, site, and enterprise networks across the portfolio. On the platform, the engineer owns the routed and switched network, the multi-path wide area network (WAN) failover architecture, classification-boundary separation, and the Risk Management Framework (RMF) and Security Technical Implementation Guide (STIG) benchmark evidence supporting Government accreditation, with hardening applied as voluntary defense-in-depth. Across the portfolio, the engineer designs and operates program office, laboratory, and site networks.