Network Administrator with Top Secret Clearance

Calnet•Santa Rita, GU

8h•Onsite

About The Position

Founded in 1989, CALNET, Inc. has become one of the fastest growing privately held companies in the Technology, Intelligence Analysis, and Language Services consulting arena. Headquartered in Reston, VA, CALNET employees deliver true value to our customers by employing best practices, world-class technologies industry expertise in every project. CALNET is ISO 9001, ISO 20000, and CMMI-Level III certified. As a Prime Government Contractor for a major government institution, we are currently searching for a talented Network Administrator with a Top Secret Clearance to work in Guam.

Requirements

Active Top Secret Clearance
Bachelor’s degree in Computer Science, IT, or equivalent experience.
US Citizen
Minimum of 5 years of advanced network administration experience, with at least 3 years explicitly focused on ICS, SCADA, BMS, FRCS or IT/OT network environments.
Deep technical expertise in Operational Technology (OT) network administration, focusing on strict network segmentation, firewall rule development, and the routing of industrial protocols (e.g., BACnet/IP, Modbus TCP).
Proven ability to securely apply DoD cybersecurity mandates, NIST SP 800-82 standards, and OT-safe network monitoring practices within the Purdue Model, ensuring deterministic traffic flows and highly available connectivity without disrupting critical facility operations or life-safety systems.
Security+ (CASP+) or CCNA or CCNP Security or CCSP or GCED or GCIA or GCLD or GDSA or GFACT AND Cisco CCNA/CCNP or Palo Alto PCNSA/PCNSE or Juniper JNCIA/JNCIS, or Cisco Managing Industrial Networks with Cisco Networking Technologies (IMINS)

Responsibilities

Configure and maintain industrial-grade network hardware (e.g., Cisco Industrial Ethernet, Palo Alto, Data Diode, Allen-Bradley Stratix, Ruggedcom, standard enterprise switches adapted for OT) deployed in mechanical rooms and harsh physical environments.
Manage network topologies (e.g., Resilient Ethernet Protocol (REP), Device Level Ring (DLR)) to ensure rapid failover and continuous deterministic traffic flow for time-sensitive control processes and environmental controls.
Maintain comprehensive backup solutions for all industrial and building switch, router, and firewall configuration files.
Implement strict network segmentation and micro-segmentation adhering to the Purdue Enterprise Reference Architecture (PERA).
Manage Ports, Protocols, and Services Management (PPSM) across the IT/OT boundary, ensuring only authorized protocols (e.g., BACnet IP, LonWorks, Modbus TCP, Fox Protocol, DNP3, CIP) traverse network enclaves.
Configure and manage OT-specific Next-Generation Firewalls (NGFW) and Unidirectional Gateways (Data Diodes).
Apply network-specific Security Technical Implementation Guides (STIGs) securely, testing configurations in non-production settings to prevent accidental physical equipment shutdowns.
Act as the primary escalation point for severe network degradation, packet loss, or routing failures within the FRCS/ICS/BMS environment.
Utilize advanced protocol analyzers (e.g., Wireshark) tailored for industrial and building protocols to conduct root-cause analysis on connectivity drops impacting physical machinery and facility controls.
Coordinate with facility/mechanical engineers, SCADA/BMS vendors, and IT cybersecurity teams to resolve boundary crossing anomalies.
Evaluate network capacity and provide engineering recommendations for lifecycle replacements, bandwidth upgrades, and hardware specifications.
Author network-specific Standard Operating Procedures (SOPs) and system baselines for the OT environment.
Support the RMF process for Platform IT (PIT) and FRCS by providing technical artifacts, topology diagrams, hardware/software lists, PPSM, and supporting vulnerability scans.
Participate in facility modernization and Military Construction (MILCON) project design reviews (35%, 65%, 95%, 100% phases).
Evaluate proposed contractor network architectures, hardware Bills of Materials (BOM), and PPSM for compliance with Command OT standards, the Purdue Model, and DoD cybersecurity mandates.
Provide SME support and oversight during integration, testing, and commissioning of new control systems and HVAC/Building systems.
Collaborate with government stakeholders and the cybersecurity commissioning team (CyCx) prior to final project handover and government acceptance.