Network Security Engineer

We are seeking a highly motivated and experienced Network Engineer to join our dynamic Information Technology (IT) team. As a Network Engineer, you will be integral to a national security mission focused on maintaining the safety, security, and effectiveness of the United States nuclear weapons stockpile. Operating within the Network Operations team of the Information Technology (IT) organization, this role involves designing, implementing, and managing complex network architectures, ensuring high availability, performance, and security. The ideal candidate will have a strong understanding of network infrastructure, security, and troubleshooting, with a proven track record of maintaining and optimizing complex network environments. This role requires a professional who can balance day-to-day operational support with involvement in network modernization initiatives., * Administer and maintain enterprise networks, including configuring and lifecycle management of network devices such as routers, switches, firewalls, virtual private network (VPN)s, and wireless infrastructure.

• Perform network maintenance and system upgrades, including service packs, patches, hotfixes, and security configurations.
• Monitor network performance and integrity, ensuring the stability, reliability, and security of the network.
• Troubleshoot and resolve complex network issues in a timely manner.
• Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, secure sockets layer (SSL) decryption, policy optimization, and intrusion detection/prevention systems (IDS/IPS).
• Develop and deploy scalable and resilient network architectures to support high availability, fault tolerance, and future growth.
• Engineer and support complex routing strategies using protocols such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP), ensuring optimal route redistribution, convergence, and path selection.
• Design, deploy, and manage hybrid network topologies, including integration with cloud environments (e.g., Microsoft Azure Virtual Networks, ExpressRoute, peering).
• Support the implementation and management of Network Access Control (NAC) solutions (e.g., Cisco Identity Services Engine (ISE) for endpoint compliance and identity-based access control.
• Administer, monitor, and support Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and other Cisco Voice over Internet Protocol (VoIP) systems, including voice gateways, internet protocol (IP) phones, and their associated infrastructure, to ensure reliable communication services.
• Deploy, configure, and maintain Cisco wireless network infrastructure, including wireless Local Area Network (LAN) controllers (WLCs) and access points, to ensure seamless and secure wireless connectivity.
• Maintain accurate technical documentation, including topology diagrams, configuration baselines, IP address management, and change control records.
• Collaborate with other IT disciplines, including cloud, systems, and security teams, to deliver integrated solutions.
• Provide technical leadership and mentorship to junior technical staff as needed.

What You Can Expect

• Meaningful work and unique opportunities to support missions vital to national and global security.
• Top-notch, dedicated colleagues.
• Generous pay and benefits with a stable organization.
• Work-life balance fostered through flexible work options and wellness initiatives.

Network Security, Network Security, Information Technology & Information Systems, Willing to Travel, Network Administration/Management, Identify Issues, Network Architecture/Engineering, High Availability, Operational Support, Record Keeping, * Bachelors degree in engineering/science/information technology discipline.

• OR Masters degree in engineering/science/information technology discipline.
• OR applicants without a bachelors degree may be considered based on a combination of at least 8 years of completed education and/or relevant experience., * Bachelors degree in engineering/science/information technology discipline with a minimum of four years of relevant experience or a Masters degree in engineering/science/information technology discipline with a minimum of two years of relevant experience.
• Network Infrastructure Management: In-depth knowledge and hands-on experience in the implementation, configuration, and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions.
• Network Security Operations: Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures, actively implementing and maintaining security protections across all networked devices such as switches, routers, and firewalls.
• Effective Communication & Collaboration: Exceptional communication skills, with the ability to effectively collaborate with customers, vendors, and technical personnel across various departments and organizations.
• Problem Solving & Technical Documentation: Ability to clearly and effectively present complex technical and operational information both verbally and in writing, solve intricate technical problems, and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation.
• Demonstrated Technical Expertise: Proven hands-on experience in the following areas:
• Cisco Switches / Routers (configuration, troubleshooting, and maintenance)
• Palo Alto Firewalls (configuration, policy management, and troubleshooting)
• Cisco ASA / FirePower (implementation, and support)
• Cisco VoIP (administration, monitoring, and troubleshooting of Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and related components)
• Cisco ISE (implementation, and management of Network Access Control solutions for endpoint compliance and identity-based access)
• Cisco Wireless (deployment, configuration, and maintenance of Cisco wireless network infrastructure, including Wireless LAN Controllers (WLCs) and access points)
• Programming/scripting languages such as Perl or Python for network automation and configuration tasks.
• Active Listening - Exceptional listening skills to give focused attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.
• Speaking - Strong communication skills to talk to others and convey information effectively.
• Writing - Exceptional skills to communicate effectively in writing as appropriate for the needs of the audience.

At Pantex, you wont just find a job-you’ll discover a career of purpose safeguarding national security through work performed nowhere else on Earth. We empower dedicated, innovative individuals like you to achieve their greatest impact surrounded by exceptional talent and limitless opportunities for professional growth.

When you #JointheMission, you choose a lifetime career where your commitment is genuinely valued and rewarded. At Pantex, we believe that extraordinary talent thrives when supported by a balanced life. Discover the flexibility that empowers you to excel, coupled with a benefits package designed for your total peace of mind from comprehensive health coverage and robust retirement planning, to opportunities for continuous learning through education reimbursement.

Notes

The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired.

If a range of Career Levels is posted, i.e., Senior Associate to Senior Specialist, internal applicants already in one of the Career Levels would come across at their current Career Level. Internal applicants currently in a lower level Career Level would move to the lowest posted Career Level.

Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required.

Position may require entry into Materials Access Areas (MAA) and participation in the Human Reliability Program (HRP). If HRP is required, candidate must complete a counterintelligence-scope polygraph, pursuant to 10 Code of Federal Regulations (CFR) 709. Medical requirements may apply., When registering for our site, please take note of the username and password you used to create your account. No one at Pantex or any partner site can reset your password. If you forget your password, you must use the forgotten password link and enter the username you originally used to create your Pantex Career Site profile. We recommend that you use a secure and trusted password manager to track your usernames and passwords.