Classified Network Engineer

Saronic Technologies•Austin, TX

About The Position

Saronic Technologies is seeking a Senior Network Engineer to design, implement, operate, and sustain classified network infrastructure and the product-side network and crypto path. The role owns Layer 2/Layer 3 networking, firewalls, TACLANE configuration and operations, and technical integration for cross-domain solutions (CDS). The engineer integrates government-furnished information and equipment payloads onto company platforms while preserving the accredited architecture, and produces as-built evidence to support facility and product ATOs. Workstreams are distinct but may overlap on TACLANE, CDS, COMSEC handling, and host/network bring-up. The position supports classified networks and payload integration in labs, factories, shipyards, and underway environments. It includes Tier 2/3 troubleshooting, change control, technical evidence for inspections, and travel to install, test, and turn over classified paths. The role does not own the system security plan or authorizing official relationship, and the engineer is not the COMSEC Account Manager or CRO unless separately appointed.

Requirements

U.S. citizen.
Active Top Secret clearance with SCI eligibility.
At least 5 years of enterprise or mission network engineering experience.
Hands-on configuration and operational experience with TACLANE KG-175 or KG-250 family devices.
Strong OSI, IPv4/IPv6, routing and switching, firewall, and VPN fundamentals.
Confident application of red/black discipline.
Experience applying STIGs to network equipment and working familiarity with RMF evidence needs.
DoD 8140 IAT II qualification, such as Security+ CE or higher.
CCNA or equivalent experience.
Ability to rack, cable, and lift equipment weighing approximately 30 pounds.
Willingness to work in SCIFs, shops, and shipyard or waterfront environments.
Willingness to travel 30–40% on short notice for circuit turn-up, inspections, and payload integration.

Nice To Haves

Three or more years of experience in classified environments.
CCNP certification.
JWICS/SIPR circuit experience with DISA or Navy.
Experience with CANES, ADNS, or afloat/ashore Navy networks.
Experience with Palo Alto and Cisco equipment in the same environment.
Experience with ISE, DNA Center, or equivalent.
CDS implementation experience.
CSfC experience.
Secure voice/SVTC experience.
Unmanned/autonomous platform, payload, or PIT integration experience.
GDMS TACLANE operator training.
COMSEC handling experience.
Shipyard, range, or field-integration experience.

Responsibilities

Design and operate classified LAN/WAN infrastructure, including classification and mission-enclave segmentation, IP schemes, routing, QoS, and management-plane isolation.
Configure and sustain approved Cisco, Juniper, Palo Alto, or equivalent network equipment under DISA STIGs; implement AAA/ISE and logging to the accredited collector.
Coordinate DISA SIPR, Navy JWICS/CWAN, and customer circuit drops, including circuit-order support, turn-up, acceptance testing, and as-built documentation.
Produce rack elevations, cabling plans, red/black separation documentation, IDPs, and configuration baselines.
Install, peer, update firmware on, and operate TACLANE-family devices in site and platform installations; implement high availability, failover, and encryptor management according to approved architecture.
Load and manage operational keying only in coordination with the appointed COMSEC Account Manager; protect CIKs and tokens and execute zeroize and reconstitution procedures when authorized.
Install and maintain approved CDS hardware and software under ISSO/AO rules; implement interfaces, NTP, logging, high availability, and filter-update processes; collect continuous-monitoring evidence.
Engineer network, crypto, and data-path integration of GFI/GFE payloads onto company platforms, including physical installation, addressing, VLANs, encryptor placement, RF/data interfaces, and cable and power constraints.
Build integration baselines documenting configurations, versions, serial numbers, crypto suites, ports, protocols, and services for ISSO use in ATO packages.
Support lab, factory, shipyard, and underway integration, including bring-up, interoperability testing, failure isolation, and restoration to the accredited baseline.
Produce implementation evidence, including diagrams, configurations, STIG results, scan artifacts, PPSM, hardware inventories, and change records.
Implement assigned POA&M technical mitigations on network and payload interfaces.
Provide Tier 2/3 break-fix support for classified transport and participate in change control.
Support CCRI and inspection technical evidence.
Travel to install, test, and turn over classified paths for facility and product ATO deployments.
Work within approved authorities and processes: do not independently change CDS filters, transfer rules, or accredited data flows, and do not own the SSP or AO relationship.

Benefits

Comprehensive medical insurance; the company pays 100% of employee premiums and 80% of dependent premiums.
Dental and vision insurance; the company pays 100% of the basic-plan employee premium and 80% of dependent premiums.
Generous paid time off and holidays.
Paid maternity and paternity leave.
Competitive salary with opportunities for performance-based bonuses.
401(k) plan with company match.
Stock options.
Basic life insurance and short- and long-term disability coverage.
Discounted pet insurance options, including a 24/7 telehealth helpline.
Free lunch benefit and unlimited free drinks and snacks in the office.