Staff Network Engineer

ARA Career•Raleigh, NC

9d•Onsite

About The Position

Applied Research Associates (ARA), Inc. is seeking an experienced Network Engineer to design, operate, secure, and sustain classified and mission-supporting network infrastructure within the Integrated Mission Systems Sector in Raleigh, North Carolina. The role supports Cisco switching and routing, Cisco and Palo Alto firewalls, integration with Splunk and Forescout, vulnerability remediation, configuration management, and documentation. The engineer coordinates closely with system administrators, cybersecurity personnel, program teams, and Government stakeholders. An active DoD Secret clearance with eligibility for TS/SCI is required. The position involves building documentation of the infrastructure under Raleigh Secure IT ownership and using it to advise information owners on future expansion and improvements. The engineer administers network devices and operating systems, supports Layer 2 and Layer 3 technologies, maintains secure segmentation and boundary protections, and supports classified and mission environments, including SIPRNet when assigned. The role also applies DISA STIGs and NIST 800-53 controls, supports cybersecurity and authorization activities, and executes approved changes through the Configuration Control Board process. ARA is an employee-owned international research and engineering company founded in 1979. The company has over 2,279 employee owners and works across defense, civil, and health technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement. ARA describes its culture as challenging, innovative, and experimental.

Requirements

U.S. citizen.
Active DoD Secret clearance with eligibility for TS/SCI.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, together with 2–4 years of relevant work experience; additional directly relevant experience may substitute for a degree.
At least 8 years of relevant network engineering, administration, or operations experience.
Strong troubleshooting ability across OSI Layers 1 through 4, including packet and log analysis.
Experience with network monitoring, configuration management, backup and recovery, patching, vulnerability remediation, and technical documentation.
Ability to meet DoD 8570/8140 cybersecurity workforce qualification requirements applicable to the assigned work role (IAT Level II).

Nice To Haves

CCNA, CCNP, or another relevant networking or security certification.
Experience supporting SIPRNet, DoDIN connectivity, classified contractor environments, or DCSA-authorized systems.
Experience with Cisco Firepower, network automation, Forescout, Splunk, TACACS+/RADIUS, network-access control, virtualization, or high-availability architectures.

Responsibilities

Build and maintain documentation of current infrastructure, including server, cable, PPSM, and port maps, and advise information owners on future expansion and improvements.
Design, configure, maintain, and troubleshoot LAN infrastructure supporting classified and mission environments, including SIPRNet when assigned, while applying DISA STIG and NIST 800-53 controls.
Administer Cisco Catalyst switches, ARS/ISR routers, Dell Fabric switches, Palo Alto 450s, and Cisco ASA 1000s, and integrate them with ForeScout/ISE, Splunk, and AAA services.
Administer IOS, IOS-XE, FTD/ASDM, Palo Alto, and SmartFabric OS10 operating systems.
Implement and support Layer 2 technologies, including STP, 802.1Q VLANs, QoS, 802.1X/MAB, DAI, and port security.
Implement and support Layer 3 technologies, including static and dynamic routing, BGP, ACLs, VRFs, traffic shaping, and rate limiting as applicable.
Maintain secure network segmentation, boundary protection, firewall policy, routing controls, DNS, and approved external or DoDIN connectivity.
Integrate network infrastructure with Splunk, Forescout, or other SIEM platforms to monitor availability, performance, capacity, configurations, and security events.
Apply DISA STIGs, secure configuration baselines, software updates, vulnerability remediation, and hardening requirements to network devices.
Develop and maintain network diagrams, IP address plans, device inventories, rack elevations, ports/protocols/services records, configuration baselines, standard operating procedures, and recovery documentation.
Prepare implementation, validation, and rollback plans and execute approved changes through the Configuration Control Board process.
Support cybersecurity incidents, outages, Government-directed actions, assessment activities, and after-hours maintenance when mission requirements demand it.
Provide technical evidence and engineering support for RMF, ATO maintenance, continuous monitoring, DCSA reviews, and customer assessments.
Communicate technical risk, authorization status, deficiencies, and resource needs to technical staff, program leadership, and Government stakeholders.