Overview In this on-site role, you will design, deploy, and sustain secure DoD-grade network infrastructure across multiple sites. You'll translate mission needs into robust network architectures and documentation, guiding implementation from planning through operational turnover. You'll work closely with cybersecurity and field teams to ensure secure, available, and compliant networking for AFLCMC environments. This is a hands-on leadership position shaping enterprise routing, switching, and WAN strategies in a high-security setting. You will contribute to modernization efforts and continuous improvement in a mission-critical program. ResponsibilitiesDevelop and document network architectures aligned with DoD and mission requirementsDesign, configure, deploy, and troubleshoot enterprise network components (routers, switches, firewalls, VPN gateways)Engineer LAN/WAN with VLANs, STP, HA architectures, QoS, and ACLsConfigure routing (BGP, OSPF, static) in multi-site environmentsSupport secure WAN technologies (IPsec, site-to-site VPNs, MPLS)Assist with DoD cybersecurity requirements (STIGs, RMF) and Zero Trust alignmentProvide technical leadership to junior engineers and field personnelCreate and maintain network diagrams, IP plans, and configuration baselinesSupport pre-deployment staging, validation, and change management processesContribute to procurement inputs and evaluate hardware/software against security and interoperability needsMaintain awareness of evolving network and cybersecurity technologies and propose improvements Key requirementsActive Top Secret clearance with ability to obtain SCIBachelor's degree with 8+ years of experience or Master's with 6+ yearsProven experience designing and troubleshooting enterprise network infrastructureStrong knowledge of OSI/TCP/IP and L1-L4 protocolsHands-on experience with enterprise routers/switches, VLANs, 802.1Q, STP, L3 switchingExperience with BGP/OSPF and WAN design including IPsec/site-to-site VPNsKnowledge of network monitoring (SNMPv3, Syslog, ICMP, NetFlow) and packet captureAbility to produce detailed technical documentation and diagramsUnderstanding of network security principles, segmentation, encryption, and defense-in-depthWillingness to work 100% on-site in Lorton, VAStrong analytical and troubleshooting abilitiesClear written communicationTechnical leadership and mentoringCisco and/or Juniper routing and switchingNext-generation firewall platforms (Cisco, Palo Alto, Fortinet)DoD STIGs, RMF, NIST controls, vulnerability management
Not specified in the original listing.
Not specified in the original listing.