Network Engineer E4

Archarithms Inc•Colorado Springs, CO

22h•Hybrid

About The Position

The Command and Control, Battle Management, and Communications (C2BMC) program is the integrating element of the Missile Defense System. It is a vital operational system that enables the U.S. president, secretary of defense and combatant commanders at strategic, regional and operational levels to systematically plan ballistic missile defense operations, to collectively see the battle develop, and to dynamically manage designated networked sensors and weapons systems to achieve global and regional mission objectives. C2BMC supports a layered missile defense capability that enables an optimized response to threats of all ranges in all phases of flight. C2BMC is the force multiplier that globally and regionally networks, integrates and synchronizes autonomous sensor and weapon systems and operations to optimize performance. C2BMC is an integral part of all system ground and flight tests which verify and exercise all current and future missile defense system capabilities. The Network Security Engineer III is responsible for supporting cybersecurity and network security activities across the C2BMC program. The position focuses on ensuring compliance with DoD Risk Management Framework (RMF) requirements, developing secure network device configurations, supporting network deployments, implementing cybersecurity hardening measures, and maintaining operational readiness across C2BMC environments. The selected candidate will provide technical support for the assessment of information system compliance with DoD RMF standards, including the review, verification, and validation of required RMF documentation and artifacts in accordance with DoDI 8510.01. The candidate will also develop and maintain cyber-secure configurations for network infrastructure devices including firewalls, switches, and routers.

Requirements

Generally, has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
The position requires an IAT Level II 8570 Compliant Certification such as Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA, etc.
Must have an active Top Secret Security Clearance
Must be a US Citizen and have/maintain a valid US passport.
Must be able to travel to alternate work locations, such as Schriever Space Force Base, to execute job duties such as deployments.
Must understand the OSI Model, TCP/IP, VLANs, UDP Multicast.
Must have firewall configuration knowledge such as Juniper, Cisco, Palo Alto. Must have knowledge of ACL design and function.
Must have hands on experience with multi-vendor switching/routing (Juniper, Cisco).
Must be an effective communicator with excellent writing and presentation skills using Microsoft PowerPoint and Visio drawing tools.
Must be able to design security configurations and testing procedures. Must be familiar with NIST CVE framework.
Must have experience with virtualization.
Must be able to work collaboratively in a team environment with other highly motivated network and system engineers.
Intermediate knowledge of security design, development, and testing methodologies.
Experienced in application of standard DOD security practices such as, STIG compliance and system accreditation implementation efforts.
Able to thoroughly document project design and development efforts.
Able to collaborate with other departments to explain network security requirements and compliance.
Able to learn security hardening basics for wide range of niche products, software and applications.
Able to summarize, brief, and recommend solutions to security issues to leadership.
Understand basics of VMware and ESXi STIGing/Hardening

Nice To Haves

Scripting knowledge Python, Ansible, PowerShell
Solid understanding of JUNOS
Prior C2BMC experience

Responsibilities

Candidate will be a primary Network Security Engineer supporting the C2BMC Program.
Candidate will be responsible for planning, deploying, integrating, and testing upgrades to the C2BMC network to operational sites.
Candidate will be required to conduct research on different networking and security related topics independently and produce reports on findings.
Candidate will be required to make sure that the team’s devices are STIG’s and hardened appropriately. Along with running any and all Cyber protocols needed.
Candidate must be willing and able to assist with real world events, to include nights and weekends.