Network Engineer / Architect

• Defines network and system requirements based on user/client needs, cost, and required integration with existing applications, systems, or platforms.
• Designs and develops network and system architectures and defines key capabilities and performance requirements.
• Plans, designs, and maintains the connectivity of enterprise network assets, ensuring compliance and secure operations on classified networks (SIPR, NIPR, JWICS).
• Collaborates with stakeholders to address connectivity requirements and implements necessary configurations to facilitate efficient and secure data transmission.
• Ensures all network switches and routers are operational, properly configured, and compliant with DISA STIG requirements; performs regular maintenance, updates, and troubleshooting.
• Configures, maintains, and monitors firewalls, intrusion protection systems, intrusion detection systems, and Cisco Identity Services Engine (ISE) for network access control and authentication, and implements security measures for specialized systems and networks.
• Supports the planning and implementation of enterprise service connections between networks, systems, and applications across domains, facilitating connections for auditing, authentication, secure cloud computing architecture (SCCA), and cross-domain solutions and guards.
• Collaborates with ISSOs and Cybersecurity Services Leads in the Risk Management Framework (RMF) process, providing inputs and documentation, and mentors/trains other NOC staff and Junior Engineers.

Required Education and Experience:

• High School Degree with 12+ yrs experience (or commensurate)

• Clearance Level: TS/SCI

• BA/BS in field and 9 years of experience, or 13 total years of experience without a degree.

• 5 years of the total experience should be relevant network engineering experience

• Deep understanding of networking protocols (TCP/IP, DNS, DHCP, routing protocols) and network security principles.

• Expertise in configuring and managing network devices, including routers, switches, firewalls, and intrusion detection/prevention systems, with hands-on experience with Cisco networking technologies (e.g., IOS, NX-OS) and security appliances (e.g., ASA firewalls, ISE).

• Familiarity with network monitoring and management tools, knowledge of virtualization and cloud networking concepts, and experience with securing classified networks (SIPR, NIPR, JWICS) and implementing DISA STIGs.

• Experience in cybersecurity frameworks and standards (e.g., NIST Cybersecurity Framework, RMF), knowledge of network access control and authentication mechanisms, ability to assess and mitigate network security risks.

• DoD 8570.01-M IAT Level II certification.

Preferred Skills and Experience:

• Master's degree in computer science, IT, or a relevant discipline.
• Experience with cross-domain solutions and guards. Knowledge of cloud computing security architectures (e.g., SCCA).
• Experience with scripting and automation tools for network management. Familiarity with ITIL framework and service delivery concepts. ITIL Foundation certificate.
• Relevant networking certifications (e.g., Cisco CCNP, CCIE).
• Experience at a DoD Combatant Command (e.g., SOUTHCOM, NORTHCOM, CENTCOM, CYBERCOM, INDOPACOM, EUCOM, AFRICOM, STRATCOM, TRANSCOM, SOCOM, SPACECOM) or a component is desired.