Network Security Engineer, Lead | Top Secret w/SCI eligibility

American Systems•Ridge Crest, CA

2d•$160,000 - $180,000•Onsite

About The Position

AMERICAN SYSTEMS is seeking a Lead Network Security Engineer to operate and secure classified network infrastructure for a Department of Defense customer in China Lake, California. The role combines hands-on Cisco network engineering and cybersecurity to help keep mission systems secure, reliable, and available. The engineer works independently on assigned priorities and partners with technical teams, customers, and vendors to address operational challenges. The position supports a classified DoD environment and requires candidates to meet security clearance and customer access requirements. Candidates with limited Solaris or systems engineering experience may be considered if they have strong network security fundamentals and a willingness to learn. The role offers opportunities to build experience across network engineering, systems administration, and cybersecurity.

Requirements

Active Top Secret clearance with SCI eligibility and ability to obtain SAP access.
U.S. citizenship, required to obtain and maintain a U.S. security clearance.
Bachelor’s degree in Information Technology, Cybersecurity, or a related field; additional relevant experience may be considered in place of a degree.
8–10 years of experience supporting enterprise networks in DoD, federal, or similarly regulated environments.
Current CCNA certification, or ability to successfully obtain it within six months of hire.
Current DoD 8140 IAT Level III certification, such as CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, or CISM.
Hands-on experience configuring and maintaining Cisco network infrastructure.
Experience supporting or implementing the Risk Management Framework (RMF) in accordance with DoD and Department of the Navy cybersecurity requirements.
Familiarity with vulnerability management, patch compliance, and information assurance controls.
Experience supporting Solaris, Linux, or UNIX-based systems.
Experience installing or configuring intrusion detection systems, firewalls, or other perimeter defense technologies.
Experience supporting continuity of operations planning, failover testing, or system-availability documentation.
Ability to meet all security clearance and customer access requirements.

Nice To Haves

Limited Solaris or systems engineering experience may be acceptable when paired with strong network security fundamentals and a willingness to learn.

Responsibilities

Configure, administer, and troubleshoot Cisco routers and switches supporting classified networks.
Install, maintain, and optimize enterprise LAN/WAN infrastructure.
Monitor network health, system logs, backups, and scheduled jobs to support reliable day-to-day operations.
Support remote users with equipment setup and Layer 2/Layer 3 connectivity troubleshooting.
Diagnose and resolve Cisco infrastructure, VPN, and VMware-related connectivity issues.
Perform authorized software installations and upgrades, manage licenses, and apply security patches.
Manage user accounts and access controls in alignment with cybersecurity best practices and customer requirements.
Support incident response, vulnerability remediation, and identification of potential security risks.
Help maintain network procedures, technical documentation, and operational standards.
Collaborate with internal teams and vendor representatives to resolve technical and operational issues.
Work with minimal supervision while contributing to the overall security posture of the environment.