SIPRNET Network Engineer

General Dynamics Mission Systems, Inc•Pittsfield, MA

6d•$117,125 - $124,000

About The Position

The SIPRNET Network Engineer is responsible for the day-to-day operation, maintenance, engineering, security, and troubleshooting of secure SIPRNET and classified network and systems environments supporting critical business and customer missions. The position serves as a technical subject matter expert who maintains highly available, secure, compliant, and operationally ready SIPRNET infrastructure across geographically dispersed locations. The engineer provides hands-on and remote support across SIPRNET environments, including network infrastructure, routing and switching, firewalls, encryption devices, virtualization, and enterprise services. The role involves troubleshooting complex technical issues, implementing approved configuration changes, supporting new technology deployments, and ensuring compliance with applicable Department of Defense, DISA, NIST, and cybersecurity requirements. The engineer must be able to work independently, respond to operational issues, manage concurrent priorities, and communicate technical information clearly to people with varying levels of technical experience. Travel is required to support geographically dispersed environments, deployments, maintenance, inspections, and customer requirements.

Requirements

Bachelor’s degree in computer science or a related field, or equivalent relevant experience, and at least 5 years of relevant experience; alternatively, a master’s degree and at least 3 years of relevant experience.
Ability to obtain a Department of Defense Secret security clearance at time of hire; selected applicants must meet U.S. Government eligibility requirements for access to classified information.
U.S. citizenship is required due to the nature of the work.
Hands-on experience supporting SIPRNET or classified network operations in a Department of Defense environment.
Strong understanding of SIPRNET architecture, network administration, systems administration, and operational support.
Extensive experience with TCP/IP, subnetting, DHCP, routing, switching, packet analysis, network troubleshooting, and network security.
Experience configuring and troubleshooting Cisco network infrastructure and complex network issues in high-availability operational environments.
Experience configuring and troubleshooting enterprise firewall technologies, including Palo Alto NGFW.
Experience with firewall policies, ACLs, network segmentation, BGP and enterprise routing protocols, and secure network architectures.
Experience with AAA technologies, including RADIUS, TACACS, 802.1X, and Cisco ISE.
Working knowledge of NIST SP 800-53, NIST SP 800-171, RMF, DISA STIGs, vulnerability management, configuration management, and System Security Plans.
Experience working within formal change management and configuration management processes.
Ability to create and maintain technical documentation, network diagrams, system configurations, and operational procedures.
Strong analytical and problem-solving skills, including the ability to independently troubleshoot complex technical problems.
Ability to clearly communicate network requirements, technical instructions, and troubleshooting steps to personnel with varying levels of technical experience.
Strong written and verbal communication skills.
Subject matter expertise in one discipline or field and developing working knowledge in adjacent disciplines or fields.
Understanding of how the domain interrelates with other components within closed and enterprise networking environments.
Expert experience within the primary domain and ability to resolve a wide range of issues in creative ways.
CCNA certification.

Nice To Haves

Experience supporting Cyber Operational Readiness Assessments (CORA).

Responsibilities

Operate, maintain, administer, and troubleshoot secure network infrastructures.
Design, develop, configure, test, implement, and maintain secure network engineering solutions supporting SIPRNET operations.
Configure, install, maintain, and troubleshoot Cisco routers, switches, firewalls, network security appliances, and other network components.
Administer and troubleshoot routing, switching, VLANs, TCP/IP, subnetting, DHCP, BGP, ACLs, firewall policies, and network security technologies.
Configure, maintain, and troubleshoot Cisco Catalyst and Nexus switches, Cisco ISR/ASR routers, Cisco Identity appliances, Palo Alto next-generation firewalls, and related network infrastructure.
Implement and maintain network security controls in accordance with U.S. Government COMSEC, NIST, DISA, and Department of Defense requirements.
Use packet analysis, monitoring, logging, and diagnostic tools to identify and resolve complex technical issues.
Analyze network performance, availability, and security events and determine appropriate corrective actions.
Perform operating system and vendor software patching in accordance with approved configuration management and security requirements.
Implement and maintain STIGs, security configurations, and other applicable cybersecurity controls across network infrastructure.
Support CORA, DISA inspections, audits, security assessments, and other customer compliance activities.
Maintain network diagrams, system documentation, configurations, technical baselines, standard operating procedures, and troubleshooting documentation.
Support installation, configuration, testing, and operational deployment of new SIPRNET infrastructure, network technologies, systems, and security solutions.
Perform network and systems configuration changes in accordance with established change and configuration management processes.
Support identity, authentication, authorization, and access control technologies, including RADIUS, TACACS, Cisco ISE, and 802.1X.
Monitor network and system performance using approved monitoring, logging, and security tools, including Splunk and other enterprise monitoring platforms.
Identify and troubleshoot security, availability, configuration, and performance issues and coordinate resolution with appropriate technical teams.
Research emerging technologies and technical solutions and recommend improvements to the SIPRNET network and systems environment.
Provide effective remote guidance and support to personnel with varying levels of technical experience.
Travel to support geographically dispersed SIPRNET environments, infrastructure deployments, maintenance activities, inspections, and customer requirements.