SME Network Administrator

GovCIO
Fairfax County, VA, United States
4 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$120,000 - $160,000
Working hours
Regular working hours
Job source

Tech stack

Application Firewall Systems Engineering Cyber Security Dynamic Host Configuration Protocol Disaster Recovery Domain Name System Security Extensions Domain Name System (DNS) IP Address Management Key Management BIG-IP Global Traffic Manager (GTM) Zero Trust Network Access Security Content Automation Protocol
+8 more
Identity Services Engine Load Balancing BIG-IP Local Traffic Manager (LTM) SC Clearance Spoofing BIG-IP Access Policy Manager (APM) Big Ip Vulnerability Analysis

Job description

The Network Administrator SME will handle the technical administration and security enforcement of core DDI services, load-balancing platforms, and classified systems. Core responsibilities include:

  • Serve as the primary technical authority and SME for enterprise core DDI services, utilizing Infoblox Grid Manager to engineer, deploy, and operate Infoblox Grids, DNS zones, DNSSEC, DHCP scopes, and automated IP Address Management (IPAM).
  • Implement and manage DNSSEC protocols using Infoblox tools, ensuring proper key management, automated rollovers, trust anchors, Grid-wide policy consistency, and defense against DNS-spoofing and cache-poisoning vulnerabilities.
  • Design, deploy, and maintain Infoblox Grid architecture, including Grid member addition and removal, Grid Master / Grid Master Candidate configuration, high-availability pairs, Grid communication, synchronization, and disaster-recovery procedures.
  • Configure, administer, and support F5 BIG-IP Local Traffic Manager (LTM) for local load balancing and SSL/TLS offload; Global Traffic Manager (GTM / BIG-IP DNS) for global server load balancing and intelligent DNS; and Access Policy Manager (APM) for access policies, authentication, and secure access in unclassified and classified environments.
  • Administer and maintain secure components including Infoblox DDI Grid members and F5 BIG-IP appliances, ensuring strict compliance with DoD, DISA, and Department of War security standards.
  • Implement and enforce robust security configurations and hardening protocols across all Infoblox Grid members, F5 devices, and DDI servers in accordance with Department of War (DoW) STIGs, SRGs, DISA STIGs, and RMF requirements.
  • Conduct routine vulnerability scans reviews using tools such as ACAS, and SCAP/STIG viewer, analyze findings, and remediate security issues to successfully maintain Coast Guard system accreditation.
  • Develop and maintain comprehensive documentation, including Infoblox Grid topology and IPAM allocation records, DNS zone delegation maps, F5 virtual-server / iRule / APM policy documentation, and STIG/SRG compliance checklists.
  • Continuously monitor Infoblox Grid health, F5 BIG-IP statistics, and DDI service availability; troubleshoot complex DNS resolution bottlenecks, IP assignment conflicts, load-balancing issues, and authentication errors within classified environments.
  • Support ongoing Risk Management Framework (RMF) activities by preparing, reviewing, and updating critical accreditation artifacts such as System Security Plans (SSPs), POA&Ms, and eMASS entries, with specific emphasis on Infoblox, F5, and associated STIG/SRG compliance.
  • Collaborate closely with cybersecurity teams, systems engineers, and program leadership to align Infoblox Grid services and F5 traffic-management capabilities with evolving USCG mission requirements.
  • Participate actively in technical reviews and change control boards (CCB), providing expert SME recommendations on Infoblox Grid design modifications, F5 configurations, DNSSEC changes, and overall security posture improvements to government leadership.

Requirements

High School with 10+ years (or commensurate experience), * Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+)

  • Minimum 5 years of experience in enterprise core services and application delivery operations, including troubleshooting and performance management.
  • Minimum 3 years of hands-on experience engineering, deploying, and administering Infoblox Grids specifically via the Infoblox Grid Manager platform (DNS, DNSSEC, DHCP, IPAM, Grid member management, HA, and Grid communication).
  • Minimum 3 years of hands-on experience administering F5 BIG-IP LTM, GTM (BIG-IP DNS), and APM modules in enterprise or classified environments.
  • Demonstrated knowledge and practical application of Department of War (DoW) STIGs, SRGs, DISA STIGs, and RMF processes for Infoblox DDI and F5 BIG-IP platforms.
  • Strong experience with Infoblox Grid deployment, management, and hardening in DoD environments.

Clearance Required: Must have an active Secret clearance

Preferred Skills & Experience

  • Experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) programs, with an understanding of Coast Guard culture and IT operational environments.
  • Certified Infoblox Core Administrator (CICA) or Certified Infoblox Core Engineer (CICE) certifications.
  • F5 Certified BIG-IP Administrator (F5-CA) or equivalent certifications covering LTM, GTM/DNS, and APM.
  • Experience with Cisco ISE, DoD Zero Trust implementation, and Web Application Firewalls (WAF).
  • Experience working directly with government leadership or senior military/Coast Guard officials.
  • Strong interpersonal, problem-solving, and time-management skills.
  • Familiarity with eMASS, ACAS, SCAP/STIG Viewer, and RMF artifact development specifically for DDI and application-delivery systems.

Benefits & conditions

Posted Salary Range: USD $120,000.00 - USD $160,000.00 /Yr.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Loading talks and stories from around this role…