Network Engineer (4962)

SMX

34d•$86,000 - $143,300•Onsite

About The Position

SMX is seeking a Network Engineer to support our customer on-site at the Patuxent River Naval Air Station. Essential Duties and Responsibilities: Deploy and manage Cisco SDA solutions for enterprise networks. Configure Cisco DNA Center for network automation, assurance, and policy enforcement. Implement software-defined access (SD-Access) for secure segmentation and simplified network management. Integrate SDA with existing network infrastructure to enhance scalability and agility. Configure and manage ISE for endpoint profiling, authentication, and authorization. Implement 802.1X authentication for wired, wireless, and VPN users. Integrate ISE with Active Directory, LDAP, and other identity management systems. Deploy posture assessment and remediation policies to ensure endpoint compliance. At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success. We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration. SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).

Requirements

Clearance Required: Top Secret
Security+ or other IAT Level II certification
3+ years of related networking experience
Proficiency in network security technologies, including firewalls, VPNs, and intrusion prevention systems.
Hands-on experience with Cisco routers, switches, and wireless controllers.
Familiarity with network monitoring and troubleshooting tools (e.g., Wireshark, SolarWinds, Cisco Prime).
Knowledge of virtualization technologies and cloud networking (e.g., VMware, AWS, Azure).
Strong understanding of networking protocols (TCP/IP, BGP, OSPF, EIGRP, VLANs, etc.).
Knowledge of ISE integration with third-party security tools for enhanced threat detection and response.
Knowledge of fabric technologies, including VXLAN, LISP, and TrustSec, for secure and efficient data transport.
Advanced knowledge of Cisco ISE for network access control and policy enforcement.
Proven track record of designing, implementing, and managing enterprise networks using Cisco SDA and ISE.
Experience in large-scale network migrations and upgrades.
Excellent problem-solving and analytical skills for diagnosing and resolving complex network issues.
Strong communication skills for collaborating with cross-functional teams and stakeholders.
Ability to document network designs, configurations, and policies effectively.
Leadership and mentoring capabilities to guide junior engineers and support team development.

Nice To Haves

Cisco Certified Network Professional (CCNP) Enterprise. (Preferable, not required)
Additional certifications in cybersecurity or cloud technologies (e.g., CISSP, AWS Certified Solutions Architect)

Responsibilities

Deploy and manage Cisco SDA solutions for enterprise networks.
Configure Cisco DNA Center for network automation, assurance, and policy enforcement.
Implement software-defined access (SD-Access) for secure segmentation and simplified network management.
Integrate SDA with existing network infrastructure to enhance scalability and agility.
Configure and manage ISE for endpoint profiling, authentication, and authorization.
Implement 802.1X authentication for wired, wireless, and VPN users.
Integrate ISE with Active Directory, LDAP, and other identity management systems.
Deploy posture assessment and remediation policies to ensure endpoint compliance.