78 jobs found

GovCIO LLC seeks an IT Service Technician to support our Information Technology & Technical Support team serving federal customers. In this role, you will provide tier 1-2 support, troubleshoot hardware, software, and network issues, manage user accounts, and ensure secure, reliable operations across desktops, laptops, and mobile devices. You'll collaborate closely with cybersecurity and infrastructure teams, contribute to process improvements, and help advance GovCIO's mission to transform government IT through agile, customer-centric service. This position offers strong growth potential in federal IT within a culture focused on innovation and continual learning. Responsibilities Provide tier 1-2 technical support for Gov CIO staff and federal clients via phone, email, and ticketing systems. Troubleshoot and resolve issues with laptops, desktops, mobile devices, printers, and peripherals. Administer user accounts, permissions, and groups in Active Directory and related systems. Install, configure, and update operating systems, software, and security tools in alignment with cybersecurity practices. Support network connectivity, VPN access, and basic routing/switching issues. Document incidents, resolutions, and standard operating procedures in a knowledge base. Collaborate with cybersecurity and infrastructure teams to implement secure configurations and patches. Participate in on-call rotations and escalate complex problems to senior engineers as needed. Contribute to continuous improvement initiatives, recommending tools and process enhancements. Educate end users on IT best practices, security awareness, and self-service resources. Required Skills Windows and mac OS administration Service desk / ticketing systems (Service Now or similar) Hardware installation and troubleshooting Active Directory account and group management Basic networking (TCP/IP, DNS, DHCP, VPN) Endpoint security tools and patch management Remote support tools Scripting or automation basics (Power Shell, Bash) Documentation and knowledge base management ITIL-based incident and request management

Cherokee Federal seeks a Network Engineer SME to design, secure, and optimize enterprise networks supporting critical federal missions. You will lead architecture, configuration, and troubleshooting of Cisco-based LAN/WAN, VPN, and wireless infrastructure, ensuring high availability and compliance with government security standards. Collaborating with cross-functional teams, you'll develop technical documentation, implement monitoring and performance tuning, and guide junior engineers. Join a mission-driven, growth-focused organization delivering innovative IT solutions to U.S. government agencies nationwide. Responsibilities Design and implement secure LAN/WAN, VPN, and wireless architectures for federal environments Configure, maintain, and troubleshoot Cisco routers, switches, and firewalls Ensure network security, compliance, and documentation in line with government standards Monitor network performance, analyze logs, and optimize availability and throughput Lead complex incident resolution and root-cause analysis for network issues Develop and maintain network diagrams, runbooks, and configuration baselines Collaborate with cybersecurity, systems, and project teams on integrated solutions Provide technical leadership and mentorship to junior network engineers Required Skills Network design and architecture Cisco routing and switching (IOS/NX-OS) Firewall configuration and management VPN and remote access technologies WAN/LAN optimization and Qo SNetwork monitoring and performance tuning TCP/IP, DNS, DHCP, VLANs Network security and hardening Cisco wireless infrastructure Documentation and diagramming (Visio)

Senior Network Engineer with active TS/SCI with Polygraph to design, secure, and maintain complex federal networks. Role includes TCP/IP and routing design, LAN/WAN, VPN, SD-WAN and VoIP O&M, implementing INFOSEC/COMSEC controls, managing Cisco IOS-based infrastructure, supporting RF and spectrum needs, troubleshooting performance issues, and mentoring junior engineers in a mission-focused environment. Responsibilities Design and engineer secure TCP/IP transport, routing, and advanced virtual networking solutions. Perform network upgrades and ongoing operations and maintenance for LAN, WAN, VPN, SD-WAN, and Vo IP. Implement INFOSEC and COMSEC requirements, firewalls, and VPN-based perimeter security. Apply configuration management practices to manage and document network systems and changes. Monitor, troubleshoot, and resolve complex network performance and availability issues. Configure and manage Cisco IOS-based switching, routing, and segment routing technologies. Support RF and spectrum engineering requirements within the broader network environment. Collaborate with and mentor junior engineers on networking best practices and project tasks. Required Skills TCP/IP network design and routing protocols Cisco IOS switching and routing LAN/WAN/VPN/SD-WAN/Vo IP troubleshooting INFOSEC and COMSEC implementation Network configuration management Cloud networking (AWS, Azure) Virtualization (VMware, VDI) Firewall and perimeter security Agile and Dev Sec Ops practices RF and spectrum engineering concepts

GovCIO LLC seeks an IT Service Technician to support our Information Technology & Technical Support team serving federal customers. In this role, you will provide tier 1-2 support, troubleshoot hardware, software, and network issues, manage user accounts, and ensure secure, reliable operations across desktops, laptops, and mobile devices. You'll collaborate closely with cybersecurity and infrastructure teams, contribute to process improvements, and help advance GovCIO's mission to transform government IT through agile, customer-centric service. This position offers strong growth potential in federal IT within a culture focused on innovation and continual learning. Responsibilities Provide tier 1-2 technical support for Gov CIO staff and federal clients via phone, email, and ticketing systems. Troubleshoot and resolve issues with laptops, desktops, mobile devices, printers, and peripherals. Administer user accounts, permissions, and groups in Active Directory and related systems. Install, configure, and update operating systems, software, and security tools in alignment with cybersecurity practices. Support network connectivity, VPN access, and basic routing/switching issues. Document incidents, resolutions, and standard operating procedures in a knowledge base. Collaborate with cybersecurity and infrastructure teams to implement secure configurations and patches. Participate in on-call rotations and escalate complex problems to senior engineers as needed. Contribute to continuous improvement initiatives, recommending tools and process enhancements. Educate end users on IT best practices, security awareness, and self-service resources. Required Skills Windows and mac OS administration Service desk / ticketing systems (Service Now or similar) Hardware installation and troubleshooting Active Directory account and group management Basic networking (TCP/IP, DNS, DHCP, VPN) Endpoint security tools and patch management Remote support tools Scripting or automation basics (Power Shell, Bash) Documentation and knowledge base management ITIL-based incident and request management

GovCIO LLC seeks an IT Service Technician to support our Information Technology & Technical Support team serving federal customers. In this role, you will provide tier 1-2 support, troubleshoot hardware, software, and network issues, manage user accounts, and ensure secure, reliable operations across desktops, laptops, and mobile devices. You'll collaborate closely with cybersecurity and infrastructure teams, contribute to process improvements, and help advance GovCIO's mission to transform government IT through agile, customer-centric service. This position offers strong growth potential in federal IT within a culture focused on innovation and continual learning. Responsibilities Provide tier 1-2 technical support for Gov CIO staff and federal clients via phone, email, and ticketing systems. Troubleshoot and resolve issues with laptops, desktops, mobile devices, printers, and peripherals. Administer user accounts, permissions, and groups in Active Directory and related systems. Install, configure, and update operating systems, software, and security tools in alignment with cybersecurity practices. Support network connectivity, VPN access, and basic routing/switching issues. Document incidents, resolutions, and standard operating procedures in a knowledge base. Collaborate with cybersecurity and infrastructure teams to implement secure configurations and patches. Participate in on-call rotations and escalate complex problems to senior engineers as needed. Contribute to continuous improvement initiatives, recommending tools and process enhancements. Educate end users on IT best practices, security awareness, and self-service resources. Required Skills Windows and mac OS administration Service desk / ticketing systems (Service Now or similar) Hardware installation and troubleshooting Active Directory account and group management Basic networking (TCP/IP, DNS, DHCP, VPN) Endpoint security tools and patch management Remote support tools Scripting or automation basics (Power Shell, Bash) Documentation and knowledge base management ITIL-based incident and request management

GovCIO seeks a Senior Network Engineer to design, secure, and optimize complex enterprise networks supporting federal missions. In this IT role, you'll lead architecture, implementation, and advanced troubleshooting of LAN/WAN, cloud, and security solutions, collaborating closely with cyber and systems teams. You'll drive modernization, automation, and Zero Trust initiatives while mentoring junior engineers. GovCIO offers a culture of agility and continual learning, competitive benefits, and opportunities to shape the future of government IT. Responsibilities Design, implement, and optimize secure enterprise networks for federal customers Lead advanced troubleshooting and performance tuning of complex network issues Implement and maintain network security controls, VPNs, and segmentation Collaborate with cyber, cloud, and systems teams on integrated architectures Develop network standards, documentation, and diagrams Support modernization, automation, and Zero Trust initiatives Mentor junior engineers and provide technical guidance Ensure compliance with federal security and compliance requirements Required Skills Enterprise network design (LAN/WAN) Cisco routing and switching (IOS/NX-OS) Network security (firewalls, VPNs) TCP/IP and network protocols BGP, OSPF, EIGRP configuration Network monitoring and troubleshooting Cloud networking (AWS/Azure) Network automation/Scripting (Python, Ansible) Zero Trust and segmentation design Documentation and network diagramming

GovCIO LLC seeks a Network Engineer SME to design, secure, and optimize resilient networks supporting high-impact federal missions. You will architect and implement LAN/WAN, SD-WAN, VPN, and cloud connectivity; integrate zero-trust and cybersecurity controls; and troubleshoot complex infrastructure issues. Collaborate with agile software, cloud, and cybersecurity teams to modernize government systems, ensure high availability, and meet performance SLAs. Mentor engineers, document standards, and support continuous improvement in a fast-paced, mission-driven environment. Responsibilities Design and architect secure, scalable LAN/WAN, SD-WAN, VPN, and cloud networking solutions for federal customers. Implement, configure, and maintain routers, switches, firewalls, and load balancers to meet performance and security requirements. Monitor, troubleshoot, and optimize network performance, availability, and reliability using enterprise tools. Integrate zero-trust principles, segmentation, and cybersecurity controls into network designs and operations. Collaborate with cloud, cybersecurity, and application teams to support modernization and migration initiatives. Develop and maintain network standards, diagrams, documentation, and runbooks. Lead root-cause analysis for complex incidents and drive long-term corrective actions. Mentor junior engineers and provide SME guidance on best practices and emerging technologies. Support capacity planning, technology refresh, and continuous improvement initiatives. Ensure compliance with federal security and configuration requirements and support audits or assessments. Required Skills Network architecture and design LAN/WAN engineering SD-WAN solutions VPN and remote access Firewall configuration and security Cisco routing and switching Cloud networking (AWS/Azure/GCP) Network monitoring and performance tuning Zero-trust / segmentation Automation and scripting (Python/Ansible)

Job Description Job Description Job Title: Senior Network Security Engineer Location: Washington, DC (Onsite) Employment Type: W2 Contract Duration: 11 months About the Opportunity: ZipStaff is hiring a Senior Network Security Engineer for our client, a major U.S. passenger rail transportation organization based in Washington, DC. As a technical leader, you will design, implement and optimize perimeter and infrastructure security controls across on-premises networks and AWS/Azure, with a heavy focus on Palo Alto Networks firewalls. What You'll Do: Lead design, configuration, rule maintenance and optimization of enterprise Palo Alto firewalls and perimeter platforms. Maintain WAF, IDS/IPS, VPN and NAC technologies. Partner with cloud, network and application teams on secure AWS and Azure architectures. Respond to network security incidents, monitor via SIEM, perform threat hunting and root-cause investigations. Conduct security reviews and risk assessments aligned with NIST, CIS, PCI-DSS, HIPAA and ISO. Automate security tasks with Python, PowerShell or Bash. Maintain runbooks, network diagrams and SOPs. Mentor junior engineers and support maintenance windows, after-hours work and emergency response. Required Qualifications: Bachelor's in Cybersecurity, Computer Science, IT, Engineering or related field. 11+ years of cybersecurity engineering focused on enterprise network and firewall security. Advanced hands-on Palo Alto Networks firewall administration. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN and perimeter defense. Experience with IDS/IPS, SIEM, EDR, DLP, CASB and WAF. Securing AWS and Azure cloud infrastructure. Scripting in Python, PowerShell or Bash. Understanding of NIST, CIS Controls, PCI-DSS, HIPAA and ISO 27001. Strong problem-solving, communication and stakeholder skills. Nice to Have: Master's degree in Cybersecurity or IT. PCNSE, CISSP, CCNP Security, GIAC, CEH or Security+. SOC experience. Zero Trust architectures and cloud-native security tools. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities. To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.

Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols

Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols

Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols

Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols

Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living. Our 155,000 team members innovate with purpose, providing customers with life's essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing-today and for generations to come. Job Purpose and Impact The Senior Network Engineer - SASE will lead the design, deployment, automation, operation, and continuous improvement of Cargill's global Secure Access Service Edge (SASE) and Security Service Edge (SSE) capabilities. This role will help transform secure connectivity by migrating legacy web proxy and remote-access technologies to cloud-delivered security services, including Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), and threat protection. The engineer will provide technical leadership across network, security, identity, cloud, endpoint, and application teams to deliver reliable, scalable, and policy-driven access for users, sites, and applications. Key Accountabilities NETWORK SOLUTIONS: Designs, implements and maintains network solutions to meet organizational needs, including creating network diagrams and blueprints. NETWORK DEVICES CONFIGURATION: Sets up and configures various complex network devices such as routers, switches, firewalls, virtual private networks and software defined networking to maintain optimal performance and security. TROUBLESHOOTING & DIAGNOSTICS: Performs complex troubleshooting and diagnostics to resolve network issues, ensuring minimal downtime and maintaining network reliability. NETWORK MAINTENANCE: Leads routine maintenance and updates on network systems, including applying patches, service packs and security configurations. PERFORMANCE MONITORING & OPTIMIZATION: Monitors network performance, maintains system availability and reliability, and makes necessary adjustments to optimize performance. SECURITY MEASURES: Sustains network security by leading the implementation of appropriate measures such as firewalls, intrusion detection systems and encryption technologies. DISASTER RECOVERY PLANNING: Develops and implements disaster recovery plans to ensure business continuity in case of network failures. NETWORK AUTOMATION: Develops and implements automation and tools to streamline network operations, including configuration management, device provisioning and software updates. Qualifications Minimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience. Minimum of 5 years of relevant experience in network engineering, network security, or cybersecurity engineering. Hands-on experience implementing and supporting SASE or SSE solutions in an enterprise environment. Experience deploying and managing SWG and ZTNA technologies. Strong understanding of enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, VPNs, SSL/TLS, certificates, and network security principles. Experience troubleshooting complex connectivity, authentication, and application-access issues across hybrid and cloud environments. Preferred: Experience implementing and administering one or more leading SASE/SSE platforms, such as Netskope, Palo Alto Prisma Access, Zscaler Internet Access (ZIA), or Zscaler Private Access (ZPA). Experience designing, implementing, and supporting enterprise firewall platforms, such as Check Point, Palo Alto Networks, or Fortinet, including security policy management, network segmentation, NAT, VPN connectivity, and integration with SASE architectures. Deep understanding of SWG capabilities, including URL filtering, SSL/TLS inspection, cloud application visibility and control, malware protection, DLP, threat prevention, and policy enforcement. Experience designing ZTNA solutions for secure access to private applications and reducing reliance on traditional VPN technologies. Experience with SASE traffic steering and service components, including endpoint clients, GRE/IPsec tunnels, private access connectors or publishers, dedicated egress, and high-availability designs. Strong understanding of identity-driven security and integration with Microsoft Entra ID, Okta, Ping Identity, or similar identity providers using SAML, OAuth, OIDC, and SCIM. Experience integrating SASE platforms with endpoint security, SIEM, XDR, and security operations workflows. Knowledge of cloud networking and security architectures across AWS, Azure, and Google Cloud Platform. Experience with policy lifecycle management, security posture assessments, exception governance, and change control for cloud-delivered security services. Experience with automation and scripting using Python, PowerShell, REST APIs, Terraform, Ansible, GitHub, or similar tools. Experience with network, security, and digital-experience observability tools used to monitor user experience, application performance, and security events. Ability to develop technical architecture documentation, low-level design artifacts, implementation plans, operational runbooks, and support models for SASE deployments. Experience working within Agile engineering teams using modern engineering and DevSecOps practices. Demonstrated ability to provide technical leadership, mentor engineers, and collaborate across network, security, identity, cloud, endpoint, and application teams. Equal Opportunity Employer, including Disability/Vet. To apply using chat/text, please click Apply Now button OR use this link to create a login to apply.

Job Description Job Title: Network Engineer - Locals Only Location: NYC, NY - Hybrid - 3days in a week onsite Experience: 12+ Yrs Only Visa Independents In person client round Mandatory What matters most: Linux and Kubernetes depth comes before networking credentials. He wants people who can walk into the lab on day one, test and certify hands-on, and communicate clearly. A CCIE number matters less than proven hands-on work. Must-haves: Linux networking and administration, Kubernetes and container networking (CNI), and kubectl eBPF, especially Cilium for policy enforcement, observability and BGP integration Python and Ansible (Robot Framework is a plus), Git/GitHub and Infrastructure-as-Code OSPF, BGP, IGMP and PIM Cisco Catalyst and Nexus, IOS/XE/NX-OS (limited XR), and Arista 7280, 7504 and 7060 Lab testing and certification: CVE analysis, rapid patch and code certification, and bug scrubs tcpdump and Wireshark, plus IXIA or Spirent performance testing 8+ years of LAN/WAN across campus, branch, WAN/MAN, data center and low-latency networks. CCNP expected; CCIE not required. Nice to have: interop with F5, A10, Fortinet and SRX (MAB/802.1x), and cybersecurity and network risk assessment. Key Responsibilities: Network Routing and Switching Engineer is responsible for testing and certifying network hardware to ensure optimal performance, reliability, and compliance. This role is crucial for maintaining the integrity and efficiency of the organization's network infrastructure. The successful candidate should have hands-on experience in functional testing, with the ability to identify automation opportunities and develop automated test solutions. Mid-level Python and Ansible skills are required to create, maintain, and enhance test automation workflows, improve test coverage, and increase operational efficiency. A combination of networking expertise, Linux proficiency, automation skills, Kubernetes operations, and eBPF observability to design, test, automate, and operate modern enterprises and cloud-native network infrastructures at scale. Working knowledge of cybersecurity principles, CVE analysis, and network risk assessment. Ability to evaluate vulnerabilities, assess operational and business risk, and support remediation, patch certification, and security validation activities across enterprise network platforms. This individual's focus will be on lab testing and certifications with particular focus on the campus/ branch/ WAN-MAN/ Data Center/ Low latency/ limited interoperability with network appliances (firewalls/ load balancers) Rapid certification of patches/ SMU/ codes - with particular focus but not limited to - Risk/ CVE driven events and rapid need for targeted & expedited certifications to ensure the given patch/ SMU/ code can be safely applied on production devices. Interoperability with IP appliances like F5/ A10/ Fortinet/ SRX Load balancers and firewalls (MAB/ 802.1x, firewall & load balancers experience not necessary but a plus). Proficiency with tools such as tcpdump, Wireshark, and Git, and the ability to develop automation using Python, Ansible, APIs, and Infrastructure-as-Code techniques. Develop and design testing for various network hardware, including routers, switches. Conduct Performance Tests: Perform performance tests to evaluate the functionality, speed, and reliability of network hardware. Identify Issues: Detect and diagnose any hardware malfunctions, performance issues, or compatibility problems during testing. Document and present recommendations and finding to the wider teams, including testing results and certifications. He/ She will work on engineering standards and create best practice network documentation utilizing knowledge of industry and technical trends. Providing guidance to the wider teams related to platforms and designs This includes but is not limited to evaluating vendor offerings, collaborating with internal and external peers towards innovating, and becoming also responsible for the software and hardware testing of all future code releases and drive decisions about testing improvements. Creating and updating standards and configuration templates, tracking bugs and vulnerabilities and providing expert level support of the production environment. Heavily engage with vendors to research, understand and communicate industry trends and upcoming products & features of interest and benefit to the BUs. The Ideal candidate is one that has prior worked on network engineering designs and testing plus evaluated products within a network lab; but not a must. The position is in NY, requires on site presence 3 - 4 days weekly. Experience: Senior level, experienced, can lead projects and work independently. 8+ years of experience required with extensive experience with LAN/WAN network design, engineering, and code/ feature certification/ validation. Experience with testing design and certification of products in LAB environments is highly desirable. CCIE or at a min CCNP level experience. Skills Required: Demonstrate knowledge of working with protocols such as OSPF, BGP, IGMP and PIM. Experience with Cisco Platforms such as Catalyst and Nexus. Knowledge of certification of new code, and bug Scrubs on IOS/ XE/ NXOS/ and limited XR. Good foundation in Linux administration, networking, and automation. Cloud-native networking concepts, including Kubernetes architecture, container networking (CNI), and operational tools such as kubectl. Familiarity with eBPF-based networking and security, particularly platforms such as Cilium is major plus. This includes policy enforcement, observability, service load balancing, BGP integration, and troubleshooting using eBPF maps and kernel-level telemetry Good knowledge of Python, Github. Ansible playbooks authoring and how to integrate Ansible with ROBOT framework for seamless automation is beneficial. Some proficiency in the ROBOT Framework is a big plus Experience with Arista Platforms such as 7280, 7504, 7060 etc. Experience developing strategies with multiple vendors. Experienced with creating design documents for each certification which includes engineering guidelines. Experience with Tools such as IXIA and / or Spirent to test and certify various designs and troubleshoot networks issues. Excellent knowledge of IP Routing, BGP, OSPF, and layer2 protocols like Spanning-tree. Understanding of network protocols, network platforms such as Cisco/Arista to design and troubleshoot new implementations. Good protocol level understanding/ Wireshark. Multicast: IGMPv2/3, PIM-SM, Static RP, RP-Anycast, MSDP. IP Routing Platforms, ISR4k, ASR1K, Catalyst. Cisco/ Arista Switching Platforms Catalyst switches. strong knowledge of Switching and Switching mechanisms like CEF, TCAM. Skills Desired: Experience with MAB/ Port Security/ NAC/ 802.1x/ QoS/ IPSec is desirable. Understanding of new protocols being deployed intra and inter Data Center. AWS (or Azure cloud equivalent) is desirable. Data Center power and cooling, cabling 10/ 25G/ 40G/ 50G/ 100G. Cloud computing, Virtualization industry standard and trends, server technologies a plus. Router hardening technologies, DDoS mitigation, routing protocol encryption, SSH implementation, out-of-band network design, 802.1x, NAC, IPSec. L2 and L3 QoS are a plus. Other Requirements: Manage vendors, coordinate testing and evaluate PoC. Possess ability to quickly and effectively interpret data. Possess ability to perform very complex implementations with little or no guidance and/or oversight from a project manager. Ability to work independently and within a global testing team environment. Excellent verbal and written communication skills are a strong must - candidate must possess excellent business writing and presentation skills. Ability to prioritize effectively with good time management skills. Excellent interpersonal skills, strong logical and analytical skills Deep sense of ownership/accountability / must think as an owner and be proactive is a huge must Ability to move quickly and multitask in a fast-paced environment. Stakeholder management and providing reports and overviews to both technical and non-technical senior management.

Job Description Role Summary We're seeking a Senior Network / Infrastructure Engineer with strong experience designing, deploying, and supporting enterprise networks and modern infrastructure platforms. This hands-on role focuses on secure data transfer, infrastructure optimization, and day-to-day management of networking hardware, virtualization, and cloud workloads, with a strong bias toward automation and operational rigor. Key Responsibilities Infrastructure Management Own day-to-day operations of the VMware environment (vSphere/ESX/ESXi): lifecycle management, capacity, performance tuning, patching, upgrades, backup/DR coordination, and incident response. Partner on the virtualization roadmap, including planning and execution for migration from VMware to Nutanix (or Nutanix-based platforms), minimizing downtime and risk. Operate and optimize storage and compute platforms (e.g., Cisco UCS, SAN/NAS such as NetApp FAS/AFF, FlexPod), including performance troubleshooting and resilience planning. Cloud & Platform Operations Manage and optimize Microsoft Azure workloads: networking, compute, storage, security controls, cost optimization, and operational monitoring. Operate Kubernetes environments (cluster upgrades, reliability, networking, ingress, policy, and workload troubleshooting). Build, deploy, and support Docker containerized applications and supporting infrastructure (registries, image hygiene, runtime security, scaling). Implement and maintain load balancing solutions (L4/L7), including TLS configuration and operational monitoring. Network Engineering & Communications Design, implement, and support enterprise data/voice/video networks across LAN/WAN/Wi-Fi. Configure and support routing/switching and core network services (TCP/IP, BGP, OSPF, VLANs, QoS, DHCP/DNS). Administer and harden firewalls/VPNs (SonicWall, Cisco ASA, Palo Alto) and support secure remote access patterns. Security, Secure Transfers, and Compliance Support Maintain secure internal and external data transfer mechanisms (e.g., SFTP/managed file transfer), including certificate/keys, access controls, and auditing. Support vulnerability remediation, security hardening, and practical control implementation aligned to customer/security expectations (e.g., PCI/SOC-related controls where applicable). Own SSL/TLS certificate lifecycle management across infrastructure components. Operational Excellence & Automation Build repeatable, automated operations (Infrastructure-as-Code and configuration management preferred), reducing manual work and increasing reliability. Improve observability and troubleshooting practices (monitoring, alerting, packet capture, traffic analysis) and drive root-cause prevention. Participate in on-call/after-hours support rotations as needed for high-priority incidents and maintenance windows. Collaboration Collaborate across internal teams and external vendors/clients to plan changes, execute upgrades, resolve incidents, and document outcomes. Create and maintain clear technical documentation (runbooks, diagrams, standards) to improve operational consistency and knowledge sharing. Required Qualifications 5+ years in a senior network/infrastructure engineering role supporting enterprise environments (hybrid datacenter + cloud). Strong, hands-on experience with Kubernetes, VMware (vSphere/ESX/ESXi), and Microsoft Azure (these are must-haves). Proven experience designing/supporting enterprise networks: LAN/WAN/Wi-Fi, routing/switching, VPNs, QoS, and troubleshooting (packet capture/traffic analysis). Firewall administration experience with one or more of SonicWall, Cisco ASA, and Palo Alto (policy, VPN, logging/triage). Experience with virtualization operations and performance tuning (compute, storage, networking). Windows Server administration experience (including legacy environments as needed), Active Directory, Group Policy, and Exchange in enterprise contexts. Working knowledge supporting SQL Server environments (AlwaysOn preferred). Strong operational habits: change management discipline, incident response, documentation, and clear communication. Preferred Qualifications Bachelor's degree in a related field and significant datacenter operations experience. Certifications such as CCNA/CCNP, VCP, Nutanix (NCP), Azure (AZ-104/AZ-305), Security+, or equivalent experience. Experience with Cisco UCS, NetApp FAS/AFF, and FlexPod architectures in production environments. Familiarity with IIS/Tomcat administration and email security tooling (e.g., SpamTitan). Experience with tools such as Jira, Kace, SolarWinds, PRTG, Cerberus SFTP, Zerto, Trend Micro, WSUS, and related monitoring/endpoint/security platforms. Compensation & Benefits Competitive salary commensurate with experience and qualifications. Comprehensive health, dental, and vision insurance. Paid time off and holidays. Retirement savings plan options. Opportunities for career advancement and professional growth

Job Description We are looking for an experienced, customer-facing Solution Architect who has already done this work at a VAR, MSP, or IT services firm - and wants to do it somewhere with fewer constraints and more impact. This is a senior individual contributor role with the authority to lead design sessions, scope full projects, build managed services proposals, and shape how our cybersecurity and infrastructure practice evolves. You will work alongside our sales team as their primary technical partner on strategic accounts, driving outcomes that matter: securing environments, modernizing networks, migrating to cloud, and building recurring managed services relationships. Your success is measured not just by technical quality but by revenue contribution, client retention, and the trust you build as an advisor. Key Responsibilities Technical Leadership & Pre-Sales Strategy Serve as the senior technical lead on strategic pre-sales engagements, orchestrating discovery, solution design, and presentation across all technology domains. Lead customer-facing design workshops and architecture sessions with both technical (network/security engineers, architects) and executive (CIO, CISO, VP IT) stakeholders. Own the technical win strategy for complex, multi-tower opportunities involving networking, cybersecurity, SASE, Zero Trust, cloud, and managed services. Develop and deliver compelling executive briefings, whiteboard sessions, and proof-of-concept demonstrations that translate technology into business outcomes. Solution Design & Documentation Architect comprehensive solutions across cybersecurity (Next-Gen Firewall, SASE, ZTA, endpoint, SIEM/SOC), enterprise networking, SD-WAN, cloud connectivity, and compute infrastructure. Produce high-quality network architecture diagrams, logical and physical designs, and solution overview documents suitable for C-level and technical audiences. Build detailed Bills of Materials with full line-item accuracy, licensing structures, professional services hours, and margin integrity. Author Statements of Work (SOWs) and project scopes that set clear expectations and protect our delivery team. Managed Services & Recurring Revenue Position and sell our managed services portfolio - including managed SASE, managed firewall, MDR/SOC services, NOC monitoring, and cloud management - as the preferred operational model for clients. Build outcome-based business cases for recurring and managed services engagements, demonstrating ROI, risk reduction, and operational efficiency against DIY alternatives. Structure multi-year managed services agreements with appropriate SLAs, pricing models, and renewal incentives. Partner with the services delivery team to design managed service architectures that are operationally viable and profitable. Vendor & Partner Engagement Maintain deep working relationships with our key vendor partners including Cisco, Palo Alto Networks, Fortinet, Zscaler, CrowdStrike, Microsoft, AWS, Aruba/HPE, and others. Leverage vendor resources - SEs, deal desk, BDMs, MDF - to support and accelerate strategic opportunities. Stay current on the SASE and Zero Trust product landscapes including Zscaler, Prisma Access, Fortinet SASE, Cato Networks, and Cisco Umbrella/SD-WAN. Represent us at vendor partner summits, technology briefings, and customer-facing events. Internal Collaboration & Growth Mentor junior and associate SAs, sharing design patterns, BOM best practices, and client engagement techniques. Contribute to the solution playbooks, standard architectures, and reference designs. Identify gaps and emerging opportunities in our portfolio and recommend new vendor partnerships or service offerings. Required Qualifications 7+ years of overall IT experience, including 3+ years in a customer-facing pre-sales Solution Architect, Consulting Architect, or Senior Systems Engineer role at a VAR, MSP, or IT services firm. Demonstrated experience leading technical discovery, architecture design, and pre-sales engagements for complex networking and cybersecurity solutions. Deep technical expertise in cybersecurity - including Next-Generation Firewall (NGFW), Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), endpoint detection and response (EDR/XDR), SIEM, and identity-based security. Strong working knowledge of enterprise networking: routing and switching, SD-WAN, LAN/WAN design, wireless (802.11ax/Wi-Fi 6), and network segmentation. Experience architecting hybrid and multi-cloud solutions (AWS, Azure, GCP) including cloud networking, security controls, and governance. Proven ability to build and present outcome-based business cases for managed services, recurring revenue programs, and multi-year technology roadmaps. Experience authoring technical documentation including solution designs, BOMs, SOWs, and RFP responses at a professional quality standard. Polished executive communication skills - you are equally comfortable presenting a Zero Trust architecture to a CISO and a cost justification to a CFO. Preferred Qualifications Experience with SASE platforms: Zscaler (ZIA/ZPA), Palo Alto Prisma Access, Fortinet SASE, Cato Networks, Cisco Umbrella, or Cloudflare One. Hands-on familiarity with Zero Trust frameworks (NIST SP 800-207, Gartner ZTA) and their practical implementation in enterprise environments. Experience positioning and selling managed security services (managed SOC, MDR, managed SASE, managed firewall). Background in or exposure to compliance frameworks: NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, or CMMC. Prior quota-bearing or KPI-tied pre-sales experience at a firm competing with ePlus, Presidio, WWT, Ahead, NTT, or similar. Certifications Required (or obtainable within 6 months with support): Cisco CCNP Security, CCNP Enterprise, or equivalent professional-level certification Palo Alto PCNSE, PCSAE, or Prisma Certified Fortinet NSE 6/7 or Zscaler ZCCA-IA / ZCCP-IA Highly Desired: CISSP (Certified Information Systems Security Professional) AWS Solutions Architect - Professional or Azure Solutions Expert Cisco CCIE Security or Enterprise (or in-progress) Zscaler Zero Trust Certified Architect (ZTCA)

Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.

Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-