Network Engineer - Skillbridge

Viasat, Inc. • Remote - Florida, FL

6d

About The Position

The Network Engineer will support Viasat Government’s security posture, compliance evidence, and documentation across multiple networks and systems. The role contributes to the Risk Management Framework (RMF) and Authority to Operate (ATO) lifecycle by hardening and validating equipment against current DISA STIGs, evaluating identifiers from Security team scans, and maintaining accurate, audit-ready system documentation. The successful candidate will perform careful, defensible work with minimal supervision, collaborate with internal and external project teams, and represent the team in working groups, scan reviews, and audit discussions. Travel may be required to operational sites, and the role includes an on-call rotation.

Work includes preventative maintenance of hardware, software, and networks; documentation of procedures, corrective actions, configurations, and diagrams; and coordination with Cyber Security Operations Center and Security Engineering teams to identify vulnerabilities, verify network impact, and remediate affected components. The position performs quarterly STIGs and other routine RMF/ATO activities.

The engineer performs configuration-level STIG hardening across networking, security, server, storage, and virtualization platforms. This involves retrieving running configurations, comparing them with applicable DISA STIGs, making approved gap-closing changes, validating results, analyzing operational impact, and capturing supporting evidence. Related records and artifacts include STIG checklists, POA&M entries, change control records, interconnection and rack diagrams, and Corrective Action Reports.

Requirements

• At least 5 years of experience administering virtualized environments (VMs), managing multi-tenant storage systems, integrated network routing and switching, and enterprise firewall policies.
• Familiarity with virtualized environments, storage, routing and switching, and firewall policies; CCNA-level understanding is sufficient.
• Hands-on command-line and management-console experience with networking equipment, Linux, and Windows, including the ability to retrieve a running configuration, apply a directed change, and confirm it took effect.
• Working knowledge of DoD security posture, including DISA STIGs, POA&Ms, IAVMs, and the RMF compliance framework.
• Demonstrated attention to detail in producing technical documentation, including checklists, diagrams, change records, and audit evidence.
• Strong collaboration and communication skills and willingness to take direction from senior engineers.
• Security+ certification or equivalent meeting the DoD Directive 8570 baseline; must be able to obtain it within 45 days.
• Active DoD Secret Clearance or ability to obtain one when administratively feasible.
• Ability to travel up to 15%.
• Ability to work an on-call rotation.
• Ability to complete structured compliance work with minimal supervision and ask questions in working sessions before taking action.

Nice To Haves

• Red Hat Certified Systems Administrator (RHCSA).
• VMware Certified Professional.
• Windows Server AZ-800 / AZ-801 certification.
• CCNA, CCNP, or CISSP certification.
• Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology, or equivalent experience.
• Familiarity with Nessus and Security Center.
• Identity and access management experience.
• Automation experience using Python, Ansible, PowerShell, or similar tools.
• Experience configuring, administering, upgrading, and securing a wide variety of equipment and applications.

Responsibilities

• Perform preventative maintenance of hardware, software, and networks, including routine inspections, backups, and physical maintenance.
• Coordinate with team members to ensure thorough and accurate pre-execution, execution, and post-execution work.
• Create and maintain documentation such as procedures, corrective actions, configurations, trouble tickets, logs, wiring and network diagrams, rack drawings, backhaul circuit information, system change controls, and Corrective Action Reports.
• Work with Cyber Security Operations Center and Security Engineering teams to identify vulnerabilities, verify network impact, and remediate applicable components.
• Perform quarterly STIGs and routine RMF/ATO activities.
• Harden and validate Cisco IOS/NX-OS routers and switches, Palo Alto PAN-OS firewalls, Red Hat Enterprise Linux, Windows Server and Windows 11, PostgreSQL and SQL Server, PDUs, security and infrastructure appliances, VMware ESXi and vCenter, VDI, and NetApp A400 (ONTAP).
• Compare current system configurations with applicable DISA STIGs, apply gap-closing changes, and verify that settings behave as intended.
• Analyze the operational impact of proposed changes, identify risks, and coordinate mitigations with senior engineers and Information Assurance personnel.
• Participate in working sessions to review vulnerability scan results, determine applicability and ownership, and translate findings into configuration work.
• Capture evidence for hardening actions, including the finding addressed, setting changed, validation performed, supporting command output or screenshots, and resulting system state.
• Keep STIG checklists, POA&M entries, change control records, interconnection and rack diagrams, and Corrective Action Reports current.
• Coordinate with internal and external project teams, represent the team in working groups, scan review meetings, and audit discussions, and take direction from senior engineers.
• Travel to operational sites as needed and participate in an on-call rotation.

Benefits

• The company indicates that compensation may include additional cash or stock incentives and medical, financial, and/or other benefits, dependent on the position offered.
• The company references comprehensive benefit offerings focused on holistic health and wellness.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed