Network Engineer

Overview

Summary

We are seeking a skilled Network Engineer with a Secret level security clearance to support the operations, management, and network operations of Navy enterprise and DoD networks. This is a full-time, on-site position in Suffolk, Virginia, requiring presence 5 days a week. The ideal candidate will serve as a subject matter expert (SME) and primary technical advisor across multiple areas, including technical reviews, auditing, and on-demand administration of a multi-vendor routing and switching environment, heavily utilizing Multi-Protocol Label Switching (MPLS) and Virtual Routing and Forwarding (VRF).

Responsibilities

What You'll Do:

• Serve as SME and technical advisor on network engineering tasks supporting Navy and DoD networks.
• Conduct technical reviews, audits, and on-demand administration of complex routing and switching environments.
• Manage and maintain multi-vendor routing and switching platforms.
• Perform Tier 1 network troubleshooting for issues related to connectivity, firewalls, routers, and switches using Joint Management Network (JMN) ticketing system.
• Implement network designs ensuring operational sustainment and information assurance (IA) compliance across Navy and DoD multi-tenant configurations.
• Provide technical inputs throughout system/service design and ensure solutions comply with industry best practices and operational requirements.
• Administer firewall policies through quarterly audits and system hardening assessments in accordance with DoD Security Technical Implementation Guides (STIGs).
• Coordinate authorized network and firewall changes with contractor, government, and military support elements in alignment with change management processes.
• Develop and maintain technical Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), and governance documents, updating quarterly to reflect enhanced performance.

Qualifications and Education

Required Qualifications

• Active Secret Clearance required.
• Minimum 3 years of progressively relevant professional or technical experience in cybersecurity and/or information security.
• Experience with at least three (3) of the following router/switch platforms:
  • Cisco ASR 1000/9000 series, Cisco Catalyst 8200/8300/8500, Cisco Catalyst 9600, Cisco Nexus 9000 series, Juniper MX5400 series.
• Expertise in Local Area Network (LAN), Base Area Network (BAN), Wide Area Network (WAN) transport technologies, including MPLS, Next-Generation Defense Information Systems Network (DISN) Optical, and Commercial Ethernet Gateway (CEG).
• In-depth knowledge of network routing protocols: Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), and Software Defined Networking (SDN).
• Proven firewall administration experience with strong understanding of DoD IA compliance.
• Ability to develop and implement network design and operational sustainment plans in multi-tenant enterprise environments.

Accreditation Requirements for Cybersecurity Workforce (CSWF):

• Must comply with DoD Information Assurance (IA) Workforce Improvement Program (DoD 8570.01-M) certifications.
• Personnel performing IA functions must have current DoD-approved IA workforce certifications appropriate to their role.
• Workstation administrators must have IAT Level I certifications (e.g., Security , A , Network ) and required OS certifications (e.g., Windows 7 Exam 70-680).
• Server administrators must have IAT Level II certifications for Windows, Linux, and/or Solaris.
• Personnel involved in system security standards and procedures must have IAM II certification.
• Certification documentation must be maintained and reported as required.

Compensation

The proposed salary range for this role is $****** to $******* USD. The salary range provided is a good faith estimate representative of all experience levels. Karsun considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.