Data Network Engineer

Nou Systems • Colorado Springs, CO

1d

About The Position

nou Systems, Inc. (nSI), a 100% employee-owned technology company, is hiring a Network Engineering Subject Matter Expert (Engineer 4) to support the Missile Defense Agency’s Next Generation Environment (NGE) program. In a Systems Engineering and Technical Assistance (SETA) capacity, this role serves as a trusted technical advisor to the Government Chief Technology Officer and NGE leadership. The position provides technical oversight and architectural guidance for a secure, resilient hybrid multi-cloud environment, aligning network transport, enterprise services, and security solutions with Department of Defense Zero Trust Architecture requirements.

The role provides senior technical authority in architectural reviews and guidance across AWS, Azure, and on-premises VMware Cloud Foundation and NSX environments. It covers enterprise Infoblox DNS, DHCP, and IP Address Management (DDI), network transport and cloud connectivity, DoD network boundaries, segmentation, security gateways, and firewalls. The engineer also leads technical exchanges with contractors and vendors and serves as an escalation authority for complex network integration and connectivity issues.

nSI describes itself as a high-tech company working in missile defense, cybersecurity, test range modernization, biotechnology, and space control. Founded in 2012, it offers career advancement and development opportunities and a culture that treats employees like family. Benefits may vary based on status; most positions include competitive compensation and a range of benefits and development opportunities.

Requirements

• Master’s degree in a STEM discipline and at least 12 years of engineering or IT architectural experience, or a bachelor’s degree in a STEM discipline and at least 20 years of relevant experience.
• Demonstrated experience architecting enterprise DNS, DHCP, and IP Address Management (DDI) solutions, specifically using Infoblox as an Authoritative Source of Truth in hybrid cloud environments.
• Experience designing, deploying, and securing enterprise networks across AWS, Azure, and on-premises VMware VCF/NSX environments.
• Experience designing, integrating, and accrediting network transport and boundary security solutions within classified DoD environments.
• Active Top Secret security clearance with current SCI eligibility (TS/SCI).
• Meet DoD 8140/8570 requirements for an IAT Level III or IASAE Level II position.
• Active (ISC)² Certified Information Systems Security Professional (CISSP) certification.
• U.S. citizenship is required.
• Lacking any one of the listed basic qualifications disqualifies candidates.

Nice To Haves

• Degree in Network Engineering, Computer Science, Computer Engineering, Systems Engineering, or a related technical discipline.
• Infoblox Core Administrator / Engineer (CDCA / CICA) certification.
• Cisco Certified Internetwork Expert (CCIE Enterprise Infrastructure) certification.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
• F5 Certified Technology Specialist (F5-CTS) certification.
• VMware Certified Advanced Professional (VCAP) – Network Virtualization certification.
• AWS Certified Advanced Networking – Specialty certification.
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) certification.
• Experience automating Infoblox, firewall, and cloud routing configurations with Infrastructure as Code tools, including Terraform, Ansible, Python, and REST APIs.
• Advanced knowledge of DISA STIGs, DODNET connection requirements, NIST SP 800-207, and DISA Thunderdome Zero Trust capabilities.
• Experience implementing multi-tenant micro-segmentation, software-defined networking, and secure hybrid cloud architectures.
• Prior experience in a SETA, Advisory and Assistance Services (A&AS), or direct engineering advisory role supporting Government Program Managers, Directors, or Chief Technology Officers.

Responsibilities

• Serve as a senior technical authority in architectural review boards, assessing vendor-proposed network, boundary, and DDI designs against NGE architecture and DoD Zero Trust requirements.
• Provide technical oversight and architectural direction for hybrid enterprise networking across AWS, Azure, and on-premises VMware Cloud Foundation environments.
• Design and document end-to-end network transport solutions, including routing topologies, traffic engineering, multi-cloud transit networks, and resilient connectivity.
• Architect and govern enterprise Infoblox DDI infrastructure as the Authoritative Source of Truth, including DNSSEC, split-horizon DNS, Anycast routing, and automated IP address management.
• Oversee integration of NGE enclaves with DODNET boundaries, ensuring compliance with DISA Connection Approval Processes and Versa-based SD-WAN gateways.
• Guide implementation of network micro-segmentation, software-defined perimeters, distributed firewalling, and SASE capabilities aligned with DISA Thunderdome standards.
• Provide technical direction for F5 BIG-IP application security gateways and Palo Alto Networks next-generation firewalls supporting Layer 7 inspection, threat prevention, and Zero Trust enforcement.
• Support VMware NSX networking, including logical routing, distributed firewalling, network segmentation, and automated IP provisioning.
• Evaluate cloud networking architectures, including AWS Transit Gateway, Azure networking services, and automated routing between cloud and on-premises environments.
• Lead technical exchange meetings with integration contractors and technology vendors, including Cisco, Versa, VMware, Infoblox, F5, and Palo Alto Networks.
• Serve as an escalation authority for complex network integration, routing, DNS, and cross-domain connectivity issues.
• Translate Government leadership requirements into actionable technical solutions while ensuring compliance with applicable DoD cybersecurity and network architecture standards.

Benefits

• Competitive wages.
• Medical, prescription, dental, and vision insurance.
• Medical plan with Health Savings Account eligibility.
• Company-funded life, short-term disability, and long-term disability insurance.
• Personal time off, vacation, and paid holidays.
• 401(k) retirement plan.
• Employee Stock Ownership Plan (ESOP).
• Flexible Spending Accounts.
• Norton LifeLock.
• Tuition reimbursement.
• Personal development, technical learning opportunities, and Lunch-n-Learns.
• Corporate-sponsored events and community outreach.
• Competitive compensation and career advancement and personal development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior