IT Systems Engineer - Secret clearance needed

Tlingit Haida Tribal Business Corporation•Washington, DC

6d•$97,000 - $107,000•Onsite

About The Position

Tlingit Haida Tribal Business Corporation is hiring an IT Systems Engineer to support mission-critical, enterprise-scale network infrastructure at Joint Base Andrews and other listed work locations. The role involves end-to-end administration, deployment, security, and operational reliability of classified and unclassified core network hardware, boundary protections, High-Assurance IP Encryptors (HAIPEs), and data center switches. The position works with Cisco enterprise and data center platforms, DoD STIG compliance, network telemetry, and defense agency stakeholders, including the 26th Network Operations Squadron and DISA. The role is based at Joint Base Andrews, JBAB, or the Pentagon, with a Monday–Friday, 8:00 a.m.–5:00 p.m. schedule and recurring Tier-3 on-call or operational standby as needed. It is full-time and exempt, requires an active DoD Secret clearance and U.S. citizenship, and pays $97,000–$107,000 per year.

Requirements

Active DoD Secret security clearance and U.S. citizenship.
Bachelor’s degree in computer science, information technology, computer/electrical engineering, or a related technical discipline, or equivalent military/commercial experience.
At least 7 years of progressive, hands-on network engineering experience in secure, mission-critical enterprise or data center environments.
Meet DoD 8140 IAT Level II or III baseline certification requirements: CCNA or CCNP Enterprise, and CompTIA Security+ CE.
The posting’s minimum/general qualifications also state 3–5 years of experience and a bachelor’s degree in computer science, information technology, or a related field; it permits substitution of a relevant master’s degree plus 3 years of experience, or no degree plus 10 years of intensive, progressive experience demonstrating required proficiency.
Ability to work Monday through Friday, 8:00 a.m.–5:00 p.m., and participate in on-call/operational standby as needed.

Nice To Haves

Hands-on experience configuring and maintaining Cisco Catalyst and Cisco Nexus switches and routers.
Experience administering Cisco Catalyst Center (DNA Center), Cisco ISE, and F5 BIG-IP (LTM/GTM).
Hands-on experience loading key material, configuring, and maintaining TACLANE/HAIPE hardware, including KG-175D and KGV-72.
Working knowledge of DISA STIG implementation and network compliance remediation.
Practical understanding of multicast routing protocols, including PIM-SM/DM and IGMP, and SNMP monitoring tools such as Cacti.
Practical scripting ability in Python and/or network automation using Ansible for provisioning and configuration drift auditing.
Familiarity with Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) fabric architectures.
In-depth knowledge of IPv6 addressing, dual-stack configurations, and routing protocols.
Familiarity operating in air-gapped systems and classified defense networks such as SIPRNet.
Prior operational experience supporting Air Force, Pentagon, or AFNCR network footprints, including JBA and JBAB.

Responsibilities

Deploy, provision, configure, and maintain high-availability data center routing and switching hardware, including Cisco Catalyst and Nexus platforms and high-performance server network interfaces.
Maintain physical and logical infrastructure records, including rack elevation diagrams, patch and port maps, cable plant documentation, and physical asset management databases.
Identify single points of failure and implement redundant, fault-tolerant network architectures.
Administer centralized network management platforms, including Cisco Catalyst Center and Cisco Identity Services Engine (ISE), for device profiling, automated access control, and 802.1X policy enforcement.
Manage and configure F5 Application Delivery Controllers (LTM/GTM) for high availability, load balancing, and traffic distribution.
Administer RSA Authentication Manager to facilitate multi-factor authentication for network devices and appliances.
Install, configure, key, and maintain Type-1 HAIPEs, including TACLANE KG-175D and KGV-72, and associated cryptographic equipment across classified and unclassified enclaves.
Harden network elements and perimeter boundary devices in accordance with DISA STIGs and DoD cybersecurity directives.
Coordinate with cybersecurity and facility teams to support DISA audit readiness for physical and logical boundary protections.
Monitor network performance, capacity, and environmental health using Cacti and enterprise SNMP-based telemetry tools.
Deploy, maintain, and troubleshoot multicast routing architectures, including PIM and IGMP snooping, for IPTV systems over LANs.
Serve as the technical point of contact with entities including the 26th NOS and DISA, facilitating troubleshooting and resolution during network outages or degraded conditions.
Author and coordinate Authorized Service Interruptions through change governance boards, including rollback plans and stakeholder communications.
Create, standardize, and maintain SOPs and runbooks aligned with Air Force instructions, environmental standards, and safety policies.
Participate in disaster recovery exercises, perform regular system backups, and validate physical and logical restoration procedures.
Participate in a recurring Tier-3 operational standby/on-call rotation to address off-hours operational degradations.