Network Engineer - Senior

Summary

REQUIRES 75% Travel

We are seeking a Senior Network Engineer to support Defense Industrial Base with classified network builds, cybersecurity readiness, network audits, and compliance-focused engineering. This role will support secure network design, implementation, assessment, hardening, troubleshooting, and documentation across multiple classified and unclassified environments. The ideal candidate has hands-on experience with DoD network infrastructure, CORA preparation or execution, DISA STIG compliance, C2C standards, Cisco routing and switching, Cisco ISE, Palo Alto firewalls, and the development of comprehensive network documentation for customer sites. This position will require travel 75% of the time.

Duties

• Design, build, configure, and support classified and unclassified Department of Defense network environments.
• Conduct network assessments, audits, and technical reviews in support of Cyber Operational Readiness Assessments (CORA) and other inspection or readiness activities.
• Review, validate, and remediate network device configurations for compliance with DISA STIGs, C2C standards, and customer security requirements.
• Configure, troubleshoot, and maintain Cisco routing and switching infrastructure across multiple customer sites.
• Support Cisco ISE administration, including authentication, authorization, network access control, TACACS , RADIUS, and related policy enforcement functions.
• Configure, review, and troubleshoot Palo Alto firewall policies, zones, NAT rules, access controls, and security configurations.
• Identify network vulnerabilities, configuration gaps, documentation deficiencies, and operational risks; recommend and implement corrective actions.
• Assess network infrastructure and devices against DISA Security Technical Implementation Guides (STIGs) and support NIST SP 800-53 security control assessments.
• Develop and maintain detailed network documentation, including diagrams, IP address plans, port maps, device inventories, rack layouts, configuration baselines, and site-specific procedures.
• Work directly with government customers, cybersecurity teams, system administrators, and other technical stakeholders to resolve network and compliance issues.
• Support change management, configuration management, vulnerability remediation, and technical reporting related to network infrastructure.

Requirements

• Active Secret clearance is required.
• Security or equivalent DoD 8570/8140 baseline certification is required.
• Hands-on experience supporting Department of Defense network environments, including classified networks.
• Experience conducting or supporting classified network builds, network migrations, or secure network modernization efforts.
• Strong knowledge of routing, switching, VLANs, trunking, subnetting, ACLs, firewalls, VPNs, network segmentation, and enterprise network troubleshooting.
• Experience with Cisco routers, switches, and related routing and switching technologies.
• Experience applying, reviewing, or remediating DISA STIGs for network devices.
• Experience supporting CORA, cybersecurity inspections, audits, compliance reviews, or technical readiness assessments.
• Ability to create professional and accurate network documentation for customer environments.
• CCNA or higher certification ; experience with Cisco ISE, Palo Alto firewalls, ACAS/Nessus, STIG Viewer, RMF, or DoD compliance workflows is highly desirable.

Pay: $150,000.00 - $200,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Paid time off

License/Certification:

• CompTIA Security or equivalent certification? (Required)

Security clearance:

• Secret (Required)

Willingness to travel:

• 75% (Required)

Work Location: On the road

Salary : $150,000 - $200,000