Data Network Engineer

Nou Systems Inc•Huntsville, AL

1d•$155,000 - $205,000

About The Position

nou Systems, Inc. is hiring a Network Engineering Subject Matter Expert (Engineer 4) to support the Missile Defense Agency’s Next Generation Environment (NGE) program. In a Systems Engineering and Technical Assistance (SETA) capacity, this role will advise the Government Chief Technology Officer and NGE leadership, providing technical oversight and architectural guidance for a secure, resilient hybrid multi-cloud environment. The work focuses on aligning network transport, enterprise services, and security solutions with Department of Defense Zero Trust Architecture requirements. The position serves as a senior technical authority for network architecture reviews and integration. It covers enterprise networking across AWS, Azure, and on-premises VMware Cloud Foundation and NSX environments; Infoblox DDI architecture; classified network transport and boundary security; and implementation of micro-segmentation, software-defined perimeters, distributed firewalling, and SASE capabilities. The role also provides technical direction for network security products and supports integration with DODNET boundaries, contractors, and technology vendors. nou Systems describes itself as a 100% employee-owned company with a culture emphasizing teamwork, collaboration, employee development, and a supportive work environment. Final compensation is determined by factors including relevant experience, skills, certifications, and geographic location.

Requirements

Master’s degree in a STEM discipline and at least 12 years of engineering or IT architectural experience, or a bachelor’s degree in a STEM discipline and at least 20 years of relevant experience.
Demonstrated experience architecting enterprise DNS, DHCP, and IP Address Management (DDI) solutions using Infoblox as an Authoritative Source of Truth in hybrid cloud environments.
Experience designing, deploying, and securing enterprise networks across AWS, Azure, and on-premises VMware VCF/NSX environments.
Experience designing, integrating, and accrediting network transport and boundary security solutions within classified DoD environments.
Active Top Secret security clearance with current SCI eligibility (TS/SCI).
Meet DoD 8140/8570 requirements for an IAT Level III or IASAE Level II position.
Active (ISC)² Certified Information Systems Security Professional (CISSP) certification.
U.S. citizenship.
The posting states that lacking any one of the listed basic qualifications disqualifies an applicant.

Nice To Haves

Infoblox Core Administrator / Engineer (CDCA / CICA) certification.
Cisco Certified Internetwork Expert (CCIE Enterprise Infrastructure) certification.
Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
F5 Certified Technology Specialist (F5-CTS) certification.
VMware Certified Advanced Professional (VCAP) – Network Virtualization certification.
AWS Certified Advanced Networking – Specialty certification.
Microsoft Certified: Azure Network Engineer Associate (AZ-700) certification.
Experience automating Infoblox, firewall, and cloud routing configurations using Infrastructure as Code tools, including Terraform, Ansible, Python, and REST APIs.
Advanced knowledge of DISA STIGs, DODNET connection requirements, NIST SP 800-207, and DISA Thunderdome Zero Trust capabilities.
Experience implementing multi-tenant micro-segmentation, software-defined networking, and secure hybrid cloud architectures.
Prior experience in a SETA, Advisory and Assistance Services (A&AS), or direct engineering advisory role supporting Government Program Managers, Directors, or Chief Technology Officers.

Responsibilities

Serve as a senior technical authority in architectural review boards, evaluating vendor-proposed network, boundary, and DDI designs against NGE architecture and DoD Zero Trust requirements.
Provide technical oversight and architectural direction for hybrid enterprise networking across AWS, Azure, and on-premises VMware Cloud Foundation environments.
Design and document end-to-end network transport solutions, including routing topologies, traffic engineering, multi-cloud transit networks, and resilient connectivity.
Architect and govern enterprise Infoblox DDI infrastructure as the Authoritative Source of Truth, including DNSSEC, split-horizon DNS, Anycast routing, and automated IP address management.
Oversee integration of NGE enclaves with DODNET boundaries and ensure compliance with DISA Connection Approval Processes and Versa-based SD-WAN gateways.
Guide implementation of network micro-segmentation, software-defined perimeters, distributed firewalling, and SASE capabilities aligned with DISA Thunderdome standards.
Provide technical direction for F5 BIG-IP application security gateways and Palo Alto Networks next-generation firewalls supporting Layer 7 inspection, threat prevention, and Zero Trust enforcement.
Support VMware NSX networking, including logical routing, distributed firewalling, network segmentation, and automated IP provisioning.
Evaluate cloud networking architectures, including AWS Transit Gateway, Azure networking services, and automated routing between cloud and on-premises environments.
Lead technical exchange meetings with integration contractors and technology vendors, including Cisco, Versa, VMware, Infoblox, F5, and Palo Alto Networks.
Serve as an escalation authority for complex network integration, routing, DNS, and cross-domain connectivity issues.
Translate Government leadership requirements into actionable technical solutions while ensuring compliance with applicable DoD cybersecurity and network architecture standards.