IT Network Engineer

Castelion Corporation•Allen, TX

3d•Onsite

About The Position

Castelion is seeking a highly skilled Network Engineer to implement, manage, and maintain network infrastructure supporting mission-critical systems. The role requires deep knowledge of networking protocols and architecture, familiarity with cybersecurity requirements such as DISA STIGs, hardening, and Zero Trust, and experience operating in a fast-paced, growing organization. Experience in a manufacturing campus setting is especially relevant. The position calls for an independent, autonomous self-starter. The engineer will support secure enterprise and hybrid-cloud networks across corporate, operational technology (OT), guest, and other environments, and may assist with deployments and field operations. The role is on-site, may require after-hours or on-call support, and includes occasional lifting of IT equipment up to 40 pounds and data center work. As-needed travel to other Castelion sites is expected at 5–10%. The position may require access to classified information or restricted U.S. Government sites, systems, or information. If designated, employment may depend on obtaining and maintaining the required government clearance or authorization and meeting applicable citizenship or other eligibility requirements. Access to export-controlled information is required, so employment is contingent on being able to access applicable information without additional export licensing.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
At least 3 years of experience in network engineering roles.
Strong knowledge of networking protocols, including TCP/IP, BGP, OSPF, EIGRP, and MPLS.
Hands-on experience with firewalls, switches, wireless access points, and power.
Experience applying controls as directed by cybersecurity frameworks, including RMF, STIGs, NIST, and CMMC.
Strong documentation and communication skills.
Strong experience with SD-WAN and software-defined networking (SDN).
Ability to work on-site; some after-hours or on-call support may be necessary.
Ability to occasionally lift IT equipment weighing up to 40 pounds and perform data center work.
Ability to access applicable export-controlled information without requiring additional export licensing.

Nice To Haves

Experience in fast-paced companies, startups, defense, or government environments.
Industry certifications such as CompTIA Security+, CISSP, or CCNA.
Experience with 802.1x and RADIUS for wired and wireless networks.
Experience supporting classified networks.
Experience with automation tools such as Ansible, Terraform, Puppet, or PowerShell DSC.
Understanding of Zero Trust architecture and secure enclave designs.
Active security clearance.
Experience in a manufacturing campus setting.

Responsibilities

Design, deploy, and maintain secure and scalable enterprise network infrastructure, including LAN, WAN, VPN, VoIP, and wireless.
Collaborate with the network team lead, management, cybersecurity, and systems administration teams to enable and secure corporate, OT, guest, and other networks.
Maintain modern hybrid-cloud network infrastructure, including workloads on premises, in major cloud providers, and in the field.
Configure and manage routers, switches, firewalls, and other network devices from common major vendors.
Implement and maintain system hardening in compliance with DoD STIGs, NIST frameworks, CMMC, and other applicable requirements.
Troubleshoot complex network issues and perform root cause analysis across multiple environments.
Develop and maintain network documentation, diagrams, and standard operating procedures.
Participate in audits, accreditation, and certification processes.
Support deployments and field operations, including as-needed travel to other Castelion sites.