27 jobs found

Job Description Location: Indianapolis, Indiana Work arrangement: Hybrid - on-site Tuesday through Thursday; remote Monday and Friday Employment: Full-time, direct hire Industry: Consumer products manufacturing Experience: 8+ years About the role An established consumer products manufacturer is seeking a Senior Network Engineer to join its corporate network group. You'll support a 24/7, multi-site environment and help modernize the company's network across offices and manufacturing plants. This is a hands-on individual contributor role. You'll handle complex network and wireless issues, serve as the team's go-to wireless resource, and contribute to major projects including SD-WAN expansion, network segmentation, infrastructure upgrades, acquisitions, and IT/OT convergence. What you'll do Troubleshoot complex wired, wireless, and WAN issues; identify root causes and implement lasting fixes. Engineer wireless networks across plant locations, including site surveys, RF tuning, and capacity planning. Configure and troubleshoot routing protocols, including OSPF and BGP. Manage firewall policies using Palo Alto and Panorama, supporting segmentation and secure network design. Maintain Meraki SD-WAN and site-to-site connectivity. Collaborate with security and OT teams on segmentation and access control. Automate configuration, patching, and compliance checks using Ansible, Python, Cisco Catalyst Center, or similar tools. Monitor network performance and capacity, and resolve issues proactively. Maintain network standards, diagrams, design records, and procedures. Support disaster recovery planning, project design reviews, and vendor work. Coach less experienced engineers and help improve team practices. Participate in the weekly on-call rotation. What you'll bring 8+ years of enterprise networking experience, including multi-site environments. Strong Cisco routing, switching, and wireless skills. Hands-on knowledge of OSPF and BGP; EIGRP experience is useful if you can work effectively with OSPF. Experience with Palo Alto firewalls and Panorama; strong Fortinet or Cisco Firepower experience will also be considered. Experience designing and supporting wireless networks at scale, including RF work and site surveys. Familiarity with SD-WAN, Cisco Client, and Cisco Catalyst Center/DNA Center. Practical network automation experience with Ansible, Python, or similar tools. Strong troubleshooting, documentation, communication, and organizational skills. Ability to manage operational work and project assignments independently. Bachelor's degree in a technical field or equivalent hands-on experience. Willingness to support a 24/7 operation, including on-call weeks and occasional after-hours work. Preferred qualifications CCNP in Enterprise, Security, Wireless, or Automation; CCIE is a plus. PCNSE or another Palo Alto certification. Manufacturing or OT networking experience. Cloud networking in AWS or Azure. Wireless refresh experience using RF planning tools. Network monitoring and observability experience. VoIP or Microsoft Teams voice experience.

Required Education -Bachelor's Degree Required Experience -10+ years of hands-on experience deploying, migrating, managing, and supporting complex enterprise and data center networks Preferred Certification -CCNP-level knowledge is strongly preferred -Relevant Cisco certifications are a plus Required Skills -Data Center Networking: Expert-level hands-on Cisco Nexus and Catalyst routing/switching; BGP, OSPF, L2/L3 design, resiliency, segmentation -Enterprise WAN & SD-WAN: Design, deployment, migration, routing integration, policy, branch connectivity, path selection, troubleshooting - Prisma SD-WAN strongly preferred -Cisco Data Center Platforms: Nexus, Catalyst, fabric management - NDFC strongly preferred; Catalyst Center a plus -Cloud Connectivity: Azure ExpressRoute and/or AWS Direct Connect (BGP routing, route advertisement, redundancy, cloud team collaboration) -Complex Migrations: Dependency management, testing, change control, rollback planning, post-implementation validation -Hands-On Implementation Leadership: Assess environment, develop approach, execute production work, validate, resolve with minimal direction -Network Security & Adjacent Services (preferred): Enterprise firewalls, DNS/DHCP/IPAM, load balancing - Palo Alto, Infoblox, F5 particularly valuable -Automation Awareness: Terraform, Ansible, Python, GitHub, GitHub Actions, IaC, GitOps (concepts desired; coding preferred, not required) -Observability & Troubleshooting: Packet analysis, telemetry, monitoring tools across hybrid environments -Communication & Collaboration: Strong written/verbal/interpersonal skills across Architecture, Cloud, Security, Operations, vendors, and global teams -Soft Skills: Self-starter, sound engineering judgment, strong ownership, continuous improvement Job Description -Senior hands-on engineer with deep expertise in data center routing/switching, enterprise WAN and SD-WAN, and hybrid cloud connectivity -Primarily focused on engineering execution: personally implementing, migrating, troubleshooting, and supporting production infrastructure -Contributes practical input to network designs and architecture decisions -Delivers and supports infrastructure across global private data centers, colocation facilities, cloud connectivity environments, and enterprise sites -Owns complex tasks with minimal direction; collaborates with Architecture, Cloud, Security, Operations, and application teams -Transitions completed solutions into stable operational support -Data Center Routing & Switching: Implement, migrate, optimize, troubleshoot Nexus/Catalyst environments (L2/L3, BGP, OSPF, redundancy, segmentation, HA) -Data Center Network Management: Deploy/operate fabrics and management platforms (NDFC or comparable) -SD-WAN & Enterprise WAN: Design, deploy, migrate, support SD-WAN/WAN services (Prisma SD-WAN preferred) -Cloud Connectivity: Implement/troubleshoot private connectivity (ExpressRoute / Direct Connect); collaborate with Cloud Engineering -Global Network Deployments: Lead hands-on deployments and complex migrations (planning, testing, cutover, rollback, validation) -Tier 3 Technical Support: Senior escalation point; independently diagnose/resolve complex production issues -Network Services Collaboration: Work across firewalls, DNS/DHCP/IPAM, load balancing (Palo Alto, Infoblox, F5 preferred) -Network Design: Contribute implementation expertise to architecture/design reviews (readiness, supportability, risk, feasibility) -Automation: Work in an automation/IaC environment (Terraform, Ansible, Python, GitHub, GitOps) -Documentation & Knowledge Transfer: Maintain designs, implementation plans, MOPs, test/rollback plans, diagrams, config standards, handoff docs

Required Education -Bachelor's Degree Required Experience -10+ years of hands-on experience deploying, migrating, managing, and supporting complex enterprise and data center networks Preferred Certification -CCNP-level knowledge is strongly preferred -Relevant Cisco certifications are a plus Required Skills -Data Center Networking: Expert-level hands-on Cisco Nexus and Catalyst routing/switching; BGP, OSPF, L2/L3 design, resiliency, segmentation -Enterprise WAN & SD-WAN: Design, deployment, migration, routing integration, policy, branch connectivity, path selection, troubleshooting - Prisma SD-WAN strongly preferred -Cisco Data Center Platforms: Nexus, Catalyst, fabric management - NDFC strongly preferred; Catalyst Center a plus -Cloud Connectivity: Azure ExpressRoute and/or AWS Direct Connect (BGP routing, route advertisement, redundancy, cloud team collaboration) -Complex Migrations: Dependency management, testing, change control, rollback planning, post-implementation validation -Hands-On Implementation Leadership: Assess environment, develop approach, execute production work, validate, resolve with minimal direction -Network Security & Adjacent Services (preferred): Enterprise firewalls, DNS/DHCP/IPAM, load balancing - Palo Alto, Infoblox, F5 particularly valuable -Automation Awareness: Terraform, Ansible, Python, GitHub, GitHub Actions, IaC, GitOps (concepts desired; coding preferred, not required) -Observability & Troubleshooting: Packet analysis, telemetry, monitoring tools across hybrid environments -Communication & Collaboration: Strong written/verbal/interpersonal skills across Architecture, Cloud, Security, Operations, vendors, and global teams -Soft Skills: Self-starter, sound engineering judgment, strong ownership, continuous improvement Job Description -Senior hands-on engineer with deep expertise in data center routing/switching, enterprise WAN and SD-WAN, and hybrid cloud connectivity -Primarily focused on engineering execution: personally implementing, migrating, troubleshooting, and supporting production infrastructure -Contributes practical input to network designs and architecture decisions -Delivers and supports infrastructure across global private data centers, colocation facilities, cloud connectivity environments, and enterprise sites -Owns complex tasks with minimal direction; collaborates with Architecture, Cloud, Security, Operations, and application teams -Transitions completed solutions into stable operational support -Data Center Routing & Switching: Implement, migrate, optimize, troubleshoot Nexus/Catalyst environments (L2/L3, BGP, OSPF, redundancy, segmentation, HA) -Data Center Network Management: Deploy/operate fabrics and management platforms (NDFC or comparable) -SD-WAN & Enterprise WAN: Design, deploy, migrate, support SD-WAN/WAN services (Prisma SD-WAN preferred) -Cloud Connectivity: Implement/troubleshoot private connectivity (ExpressRoute / Direct Connect); collaborate with Cloud Engineering -Global Network Deployments: Lead hands-on deployments and complex migrations (planning, testing, cutover, rollback, validation) -Tier 3 Technical Support: Senior escalation point; independently diagnose/resolve complex production issues -Network Services Collaboration: Work across firewalls, DNS/DHCP/IPAM, load balancing (Palo Alto, Infoblox, F5 preferred) -Network Design: Contribute implementation expertise to architecture/design reviews (readiness, supportability, risk, feasibility) -Automation: Work in an automation/IaC environment (Terraform, Ansible, Python, GitHub, GitOps) -Documentation & Knowledge Transfer: Maintain designs, implementation plans, MOPs, test/rollback plans, diagrams, config standards, handoff docs

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in computer science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.

Job Description Security Architect - Aviation Vienna, VA Aviation - Tech Team Full-time Hybrid SteerBridge is a modern technology company delivering innovative, mission focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial grade capabilities that accelerate operational effectiveness and drive measurable mission success. At the core of SteerBridge is our people-especially the veterans whose leadership, problem solving mindset, and commitment to excellence elevate every project we support. We don't simply hire exceptional talent; we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve. Position Overview SteerBridge is seeking a Security Architect to define the security architecture and compliance strategy for a mission-critical Defense Aviation platform running in AWS GovCloud for federal customers. This role owns the security blueprint-controls, identity, zero-trust access, monitoring, and authorization strategy-for environments supporting federal aviation operations. The architect will work directly with solutions architects, security and cloud engineers, data teams, and stakeholders to translate DoD security requirements into enforceable, well-architected designs and to guide the platform toward and through authorization (ATO). This role stays close to implementation, setting security standards, designing control frameworks, reviewing architectures, and guiding engineers in implementing defense-in-depth and zero-trust access. This is a hybrid position based in Vienna, VA. Key Responsibilities Define and maintain security architecture for AWS GovCloud workloads, including identity, zero-trust access, network segmentation, encryption, monitoring, and data protection. Design and own zero-trust access architecture using Zscaler (ZTNA/SASE) and establish standards for least-privilege IAM, secure access, and hardened baselines. Design defense-in-depth security frameworks and ensure alignment with DoD and DISA requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and ATO processes. Develop security architecture documentation, control mappings, decision records, implementation strategies, and evidence required to support audits and assessments. Review architectures and designs to embed security from the outset and lead security and threat-model reviews. Guide engineering teams in implementing security controls, detection and response capabilities, remediation activities, and POA&M priorities. Partner with cloud and solutions architects to develop secure-by-design platforms and establish reusable security standards and reference patterns. Assess and communicate security posture, risks, and trade-offs to technical and non-technical stakeholders, advise leadership on security strategy, and mentor engineers to strengthen security practices. Required Qualifications U.S. citizenship required and ability to obtain and maintain the security clearance required for the role. Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Software Engineering, or a related field. 10+ years of security experience, including 3+ years in a security architecture or lead role, with experience leading security initiatives across multidisciplinary teams. Deep expertise in AWS cloud security architecture, identity, network segmentation, and zero-trust design, including experience with Zscaler or a comparable ZTNA/SASE platform. Strong knowledge of DoD security frameworks and authorization requirements, including DoDI 8510, CNSSI 1253, STIGs, DoD CC SRG, and experience guiding systems through ATO and authorization processes. Demonstrated ability to translate operational requirements into security controls and design resilient, defense-in-depth architectures using least-privilege principles, network security concepts, firewalls, encryption, and other cybersecurity methods. Ability to develop and maintain security architectures aligned with organizational objectives, assess the impact of changing operational conditions, and produce clear architecture documentation and risk assessments. One or more of the following certifications: CISSP, CISM, CCNP Enterprise, GCIA, GDSA, GICSP, ISSAP, or ISSEP. Preferred Qualifications Master's or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field. Extensive experience with AWS GovCloud or other federal or highly regulated environments. Advanced experience architecting Zscaler or comparable ZTNA/SASE solutions and integrating them with identity and conditional access. Experience with continuous monitoring, SIEM strategy, incident response programs, and data security for analytics and Medallion architectures. Senior-level certifications such as CCSP or AWS Certified Security - Specialty, and/or experience supporting aviation, defense, logistics, or fleet management systems. $170,000 - $180,000 a year The posted compensation range reflects the scope and requirements of this position. A final offer will be determined based on the candidate's relevant experience, skills, education, certifications, and work location, along with the responsibilities of the position. Where applicable, contract requirements, wage determinations, and federal contract labor categories may also inform the offer. SteerBridge also offers benefits that may include health and life insurance, paid time off, paid holidays, disability coverage, retirement savings, and professional development opportunities. Benefits vary by position and eligibility. SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity-regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law. We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.

Job Description Requisition #: 2 Employment Type: Contract Labor Job Title: CL - Space Force - Network System Engineer Location: US-AZ-Scottsdale Overview: Our client engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team! Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Responsibilities: Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience. CLEARANCE REQUIREMENTS: Department of Defense Secret security clearance is required at time of hire. Applicants selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required. Qualifications: Our client is currently seeking a Senior Network Design Engineer in our Scottsdale, AZ location. ROLE AND POSITION OBJECTIVES: As a Network Engineering Support for Satellite Ground Systems, you'll be a member of a cross functional team. Responsibilities of this role include requirements analysis, design, documentation, implementation, requirements verification, maintenance, and troubleshooting functions for data communications networks in support of the SDA program. This position requires travel to deployment sites in the US. We encourage you to apply if you have any of these preferred skills or experiences: Enterprise Network Design/topology High speed network design and implementation Juniper Networks Certified Administrator (JNCIA-Junos, JNCIPis preferred or Cisco CCNA certification , CCNP preferred Proficiency with Juniper SRX-series of firewall devices Maintenance of Network topology that utilize Linux IDM/Windows Servers for DNS and Account Management, Juniper Firewalls, Arista Switches and NAS/SAN storage Familiarity with Multicast, and routing protocols (BGP, OSPF, etc) Experience with vulnerability scanning, hardening, and resolution of findings Written skills to include development and maintenance of documentation for network, system, operations, etc. Familiarity with public cloud computing networking and services, including AWS Familiarity with VMware vSphere and virtual machines Familiarity with Red Hat Enterprise Linux operating system Primary duties: Documents network plans and designs, installs components, and configures services to meet project requirements. Analyze network topologies, traffic, and capacity requirements for monitoring, maintenance, and troubleshooting during events. Between project execution events, and as part of the network team, responsible for operations, maintenance, and troubleshooting of networks of varying classifications, to include implementing security configurations, performing network diagnostics, identifying required corrective actions, and documenting changes in a clear and concise manner. Physically install devices in equipment racks and user workspaces. Position requires extensive work at a computer in an office environment with additional work possible in a raised floor computing environment. Position may require extensive travel to deployment sites in US and abroad (US Passport required) What sets you apart: Creative thinker with demonstrated success leading the software development life cycle Collaborative team player eager to provide technical leadership and position others for success Exceptional communication and presentation skills, with notable record of securing buy-in on concepts and ideas Experienced in the art of negotiation with ability to meet challenging customer requirements with win-win solutions Commitment to ongoing professional development for yourself and others Identifies opportunities to apply AI for continuous improvement and innovation Six (6) years' experience integrating and configuring switches, routers, firewalls and gateways in data communications systems with IP version 4 and associated TCP and UDP protocols preferred Possess experience in at least two (2) of the following topics with proven demonstrated experience within the past five (5) years: One (1) year experience as a computer systems manager/operator on Microsoft or LINUX based computing environments, employing Windows Server 2012 (or newer), client Windows 7 (or newer), and LINUX operating systems; One (1) year experience managing and working on local area network (LAN) administration, operation, and architecture with a minimum of 30 client systems; Specific working experience of management of a mixture of Windows and LINUX computing environments; Must be familiar with virtualization techniques - simulating a hardware platform, operating system (OS), storage device, or network resources. Active/Current DoD Secret Clearance. Certified DOD 8570.1-M IAT Level 2 preferred. Workplace Options: This position is fully on-site. While on-site, you will be a part of the Scottsdale, AZ facility. Travel up to 25% is required for this role. Expect travel needs to be in surges during times of site equipment deployments. Frequent travel to one or both of these locations: OC-N: Operations Center-North (located at Grand Forks Air Force Base, North Dakota). OC-S: Operations Center-South (located at Redstone Arsenal, Alabama).

Job Description Strativ is partnering with a fast-growing, venture-backed defence technology company building AI-driven autonomous systems used in operations around the world. They're hiring a Senior Site Infrastructure Engineer to join their Cloud & Infrastructure team and own the physical foundations behind a rapidly expanding global footprint. You'll plan, design and document physical IT infrastructure across offices, engineering labs, manufacturing facilities and data centres. That means rack layouts, structured cabling, power and cooling, MDF/IDF design and DCIM, with new site buildouts, expansions and data centre deployments in the pipeline. What you'll be doing: • Leading new site buildouts, office expansions and relocations, data centre deployments and hardware refreshes • Designing rack layouts, MDF/IDF requirements, equipment placement plans and infrastructure BOMs • Maintaining rack elevations, connectivity diagrams, cabling records and DCIM data across every environment • Capacity planning for rack space, power, cooling, cabling and equipment growth • Administering and improving DCIM/IPAM/CMDB platforms (e.g. Nautobot, NetBox, Device42) • Setting documentation and labelling standards that stay accurate throughout the infrastructure lifecycle • Reviewing floor plans, low-voltage drawings, vendor designs and SOWs • Managing circuit inventory and lifecycle, including renewals, upgrades, relocations and carrier coordination • Working with architects, contractors, colos, carriers and OEMs, alongside internal Network, Systems and Cloud teams • Guiding junior engineers and support staff What they're looking for: • 5+ years in data centre, enterprise site or physical IT infrastructure engineering • Strong rack design, structured copper/fibre cabling and physical infrastructure documentation skills • Solid knowledge of power and cooling: A/B power, UPS/PDU, circuit capacity, redundancy and airflow • Experience designing MDF/IDF environments and sizing infrastructure for new or growing sites • Hands-on experience with DCIM/IPAM/CMDB tools (Nautobot, NetBox, Device42, Sunbird or similar) • Working understanding of enterprise networking, including switching, wireless, WAN and carrier services • Ability to read architectural drawings, floor plans and low-voltage designs • Comfortable running projects independently from planning to deployment, with periodic travel to sites Nice to have: • Greenfield builds, data centre migrations or experience in fast-growing, multi-site organisations • Familiarity with AWS/Azure hybrid connectivity • Kit from Juniper, Cisco, Palo Alto, Dell, APC or Vertiv • Scripting or API automation for DCIM workflows • Background in aerospace, defence, manufacturing or other regulated environments • Certifications such as BICSI, CDCP or CCNA/CCNP Seattle, WA, on-site with periodic travel to sites and data centres $140,000-$210,000 base + bonus + benefits + equity

Job Description Network Security Engineer - Senior Cisco Identity Services Engine (ISE) Engineer Location: Washington, DC (Onsite) Type: Full-Time Required Experience 10-15 years of Network/Security Engineering experience. Strong hands-on experience with Cisco ISE 3.x in large enterprise environments. Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments . Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies . Experience with Active Directory integration, Security Groups, and Identity Sources . Strong understanding of PKI and Certificate Management , including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication. Experience with Cisco ISE vulnerability remediation, security patching, and production support . Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis . Experience integrating Cisco ISE with: Cisco Catalyst Meraki Firewalls F5 DNS Splunk/SIEM platforms ServiceNow & Change Management Experience creating and managing ServiceNow Change Requests . Ability to write implementation, validation, rollback, and risk assessment plans. Experience executing: ISE upgrades and patching Certificate renewals DNS changes Policy updates Security group changes New integrations Infrastructure migrations Incident & Support Experience Strong troubleshooting experience across: Endpoint Switch/AP ISE Active Directory Authorization Policy Network Access Experience with major incidents, RCA, and Cisco TAC case management. Ability to diagnose authentication, authorization, certificate, and connectivity issues. Infrastructure & Automation Experience with: Cisco ISE migrations and node deployments High Availability (HA) environments Splunk monitoring and alerting ServiceNow integrations Preferred experience with: Python Ansible Terraform REST APIs CI/CD Automation Preferred Qualifications CCNP Enterprise / CCNP Security or equivalent. Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow. Experience in highly regulated enterprise environments.

Job Family: Technology Consulting Travel Required: None Clearance Required: Active Top Secret (TS) Guidehouse is seeking an experienced Senior Network Engineer to design, install, configure, and document a standalone Cisco-based network in a dedicated lab environment. The ideal candidate brings hands-on experience deploying complex enterprise network solutions, deep familiarity with Cisco technologies, and strong operational discipline in building secure, reliable, and fully documented networks. The Senior Network Engineer will be responsible for: Designing, installing, and configuring a standalone Cisco network tailored for a lab environment. Deploying and configuring: Cisco ACI fabric, Cisco SDA (Software-Defined Access) networks, Cisco wireless access points, Firewall uplinks and associated security zones. Implementing best practices for segmentation, access control, and network performance. Standing up and configuring foundational enterprise services, including DNS, DHCP, Active Directory Producing detailed system documentation including network diagrams, configuration baselines, operational procedures, and test results. Ensuring all configurations adhere to Guidehouse quality standards and any client-specific requirements. Conducting functional and performance testing. Ensuring successful integration between network components. Troubleshooting and resolving complex issues across multiple layers. Working closely with internal stakeholders, project leads, and technical teams. Providing status updates, risk identification, and recommendations throughout the build. What You Will Do: Interface directly with clients to define IT project requirements. Implement project documentation governance aligned with company and client requirements. Track progress of project against goals, objectives, approved budgets, approved timelines. Implement change management routines to assess change requests, make recommendations, secure client approvals, and issue change orders. Assesses change requests to determine impacts to scope, budget, schedule, quality, and risk. Demonstrate ability to identify complex project risks, lead constructability reviews, develop risk mitigation and contingency plans, and implement action plans to reduce or eliminate project risks. Make decisions with in-depth understanding and interpretation of procedures, organizational policies, and business practices to achieve general results. Responsible for setting department deadlines. Draw upon the analysis of others and makes recommendations that have a direct impact on the company. Other duties as assigned. What You Will Need: Bachelor's degree (Relevant experience may be substituted for formal education or advanced degree. US Citizenship is required. FIVE (5) + years of related experience and/or training. An ACTIVE TOP SECRET federal security clearance. Ability to comprehend, analyze, and interpret the most complex business/IT documents. Ability to write reports, manuals, speeches, and articles using distinctive style. What Would Be Nice To Have: CCNA, CCNP or CCIE highly preferred. Advanced skills with Microsoft Office Suite. Ability to read and understand architectural drawings and network diagrams Ability to solve advanced problems and deal with a variety of options in complex situations. What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

City/State Virginia Beach, VA Work Shift First (Days) Overview: Sentara is hiring for a Senior Specialty Infrastructure Engineer! This is a hybrid role. Opportunity for additional incentive! Overview Specialty Infrastructure engineering includes updating hardware required for maintenance of cloud, network, and telecommunication and any connectivity issues that could crop up, detecting system and application issues, and ensuring the smooth flow of data and voice throughout the organization. IT Specialty infrastructure engineers manage the security of computer systems, networks, telecommunication, and inter-application information transfers. They ensure optimum uptime for the complete network, telecom, cloud services, cloud storage, and cloud servers. The engineer also improves, plans capacity, and designs infrastructure engineering projects. An Experienced Professional applies practical knowledge of job areas typically obtained through advanced education and work experience. Responsibilities typically include: • Works independently with general supervision. • Problems faced are difficult but typically not complex. • May influence others within the job area through explanation of facts, policies, and practices. Education 5+ years of relevant experience with a Bachelor's degree(Required) or 7+ years of relevant experience without a Bachelor's degree(Required) Certification/Licensure CCNP Certification (Preferred) Experience We are looking for candidates with solid Cisco Catalyst route/switch experience. Knowledge of BGP routing would be a plus. Other pluses would be: Cisco/Fortinet Firewall experience Cisco Wireless and Juniper Mist Wireless experience Juniper Routing and switching configuration experience Physical Requirements Requires the ability to go on-site to Sentara sites to perform troubleshooting, installation, repair, and replacement of physical networking equipment. Valid driver's license required - Ability to operate a motor vehicle and drive distances of greater than 100 miles/3 - 4 hours as required Must be able to work in active construction sites with appropriate PPE Must be able to perform basic physical tasks such as lifting 25 - 50lbs, occasional ladder use, reading, nimbleness of hands for typing and writing Talroo-IT We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $118,601.60 - $180,876.80 annually. Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually. Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits. Benefits: Caring For Your Family and Your Career • Medical, Dental, Vision plans • Adoption, Fertility and Surrogacy Reimbursement up to $10,000 • Paid Time Off and Sick Leave • Paid Parental & Family Caregiver Leave • Emergency Backup Care • Long-Term, Short-Term Disability, and Critical Illness plans • Life Insurance • 401k/403B with Employer Match • Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education • Student Debt Pay Down - $10,000 •Pet Insurance •Legal Resources Plan •Colleagues have the opportunity to earn an annual discretionary bonus ifestablished system and employee eligibility criteria is met. Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance-accessible emergency room that is supported by board-certified physicians. Sentara Independence houses state-of-the-art medical equipment and highly-skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy. Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission "to improve health every day," this is a tobacco-free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details

Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . What You'll Do: CoreWeave's Network Security team ensures network infrastructure is secure, resilient and compliant. Our team partners with engineering, product teams, and partners to build secure network solutions that protect critical infrastructure and continuously improve the security posture to meet the needs of our customers. With our growing reliance on connected technology, the need to keep critical systems secure, reliable, and resilient has never been more important. We are seeking an OT Security Engineer to join our team and play a pivotal role in safeguarding the operational technologies that support our datacenter networks. About the role: This position offers a unique opportunity to work at the crossroads of cyber security, operational technology (OT), engineering, and datacenter operations. As the network security engineer responsible for our operational technology networks, your responsibilities will include identifying and evaluating cybersecurity risks, designing and launching pragmatic security solutions, and embedding security controls directly into the operational systems and technologies supporting our infrastructure. You will work with suppliers and third parties in benchmarking their capabilities against expectations and industry standards. You will also lead efforts in partnering with peer security teams and partners in production engineering as you lead continuous improvement of security posture for operational technology network environments and the devices connected. This role requires both depth in understanding network security, and breadth of knowledge of the unique challenges that face the industry in securing the infrastructure that is the foundation of modern datacenters. You will act as a trusted partner who goes beyond advisory work to roll up your sleeves and deliver. Some things you will work on: Establishing standards for security expectations covering all operational technology networks and devices connected to them. This will include network segmentation, host isolation, network traversal controls, and remote connectivity. Providing solutions to complex security issues, manage multiple tasks, and prioritize effectively in a fast-paced environment. Creating an inventory and risk register that can be used as a baseline in understanding near term and long term objectives. Partnering with production engineering and business development teams evaluating priorities for risk reduction in current deployments, and risk avoidance by evolving standards for future growth. Executing and partnering with other parties in using penetration testing to evaluate effectiveness of existing controls. Coordinating with third parties and internal teams in addressing vulnerabilities via mitigation, isolation or other strategies to protect critical infrastructure in these environments. Researching industry risks and drive change in operational networks to continuously reduce risk Developing and test recovery models and response playbooks to handle compromise scenarios. Presenting technical security information to both technical and non-technical audiences, including external partners. Maintain technical documentation, reports, and security tooling with attention to detail. Who You Are: 5+ Years of experience in network infrastructure security (firewalls, ACLs, architecture, risk management) in a global network environment. Proficiency in at least one programming or scripting language (e.g., Go, Python, C/C++) for automation, code reviews, and tooling. Bachelor's degree in Computer Science or related field. Relevant certifications such as CISSP, CCNP, PCNSE are advantageous. Experience with operational technology networks (factory or industrial systems, building management systems, power, physical security systems, remote access, HVAC, etc.), factory networks or other similar environments. Strong technical knowledge of network firewalls, virtual private networks, network segmentation, and defense in depth. Able to navigate ambiguity, identify root causes, and solve complex security problems. Excellent written and verbal communication skills with strong technical documentation abilities. Capable of working independently while managing multiple priorities in a fast-paced environment. Strong desire to continuously learn and adopt new technologies and security techniques. Preferred: Prior experience with operational technology networks that span global locations Experience with the range of obscure solutions that are often deployed on operational technology networks. Deep understanding of business-wide security best practices and implementation strategies. Experience with network automation, agentic network tooling, and incident response automation. Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren't a 100% skill or experience match. Here are a few qualities we've found compatible with our team. If some of this describes you, we'd love to talk. You love to solve problems that few others would tackle. You're curious about critical network infrastructure that is the foundation of modern data centers. You're an expert in network security with a passion to explore the more exotic nature of operational technology. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: Be Curious at Your Core Act Like an Owner Empower Employees Deliver Best-in-Class Client Experiences Achieve More Together We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us! The base salary range for this role is $164,000 to $242,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . . click apply for full job details

Job Description Job Description Overview We are seeking a CSfC Senior Network Engineer to join our team supporting Network Enterprise Technology Command (NETCOM) in Honolulu, HI. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles - the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration. Responsibilities RESPONSIBILITIES Assists the PM in the day-to-day management of leading Network Engineers. Must have an in-depth understanding of advanced networking O&M Commercial Solutions for Classified (CSfC) concepts and processes and experience applying these with little to no guidance. Must be able to provide guidance to others. Must be able to perform successfully in complex, unstructured situations. Must be proficient in multivendor networking environments in configuring firewalls, Intrusion Prevention/Detection systems, VPN gateways, routers, and switches (Cisco, Aruba, Juniper, Cisco ASA, etc.) Be able to develop and modify system scripts. Write standardized system documentation, including configuration guides, test procedures, test results, and training materials. Provide onsite training to technical and non-technical users on the daily use, management, and troubleshooting of the solution after installation. Support all Cross-Domain solution requirements Collaborate with other operations departments to design approved infrastructure Serve as the escalation contact during large outages for Tier 2 and 3 systems. Author network Engineering Design Packages to include detailed implementation project plans and procedures. Configures network, software, and hardware components to meet NSA CSfC, NIAP, and DoD requirements Performs network design and systems integration Designs, develops, implements, tests, and maintains complex secure communications networks Configuring/managing PKI Certificate Authorities for CSfC solutions Familiarity with Certificate Authority configuration (ISC CertAgent/MS Windows Server/Red Hat Certificate systems) Document configuration, test procedure, results, and training materials Preparing test reports and configuration documentation according to customer standards. Providing customer on-site training on solution daily use, management, and troubleshooting Provide tier 2 and 3 support as part of a technical team. Identify and recommend hardware and support solutions based on research and analysis of new technologies, interfacing with customers and vendors. Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to the company. Apply DoD STIGs and IAVAs Perform special projects and other duties as assigned. REQUIRED QUALIFICATIONS Top Secret OR Higher OR Secret Clearance level with completed T5 investigation Active Professional Network certification (CCNP-Security, CCNA, HPE Aruba Networking Certified Professional - Switching, etc.) Must have experience with one or more networking vendors: Cisco, Aruba, Juniper, etc. One of the following DoD8140 Certifications : SecurityX/CASP+ CCNA CCNP Security CCSP (Certified Cloud Security Professional) GCED (GIAC Certified Enterprise Defender) GCIA (GIAC Certified Intrusion Analyst) GCLD (GIAC Cloud Security Essentials) GDSA (GIAC Defensible Security Architecture) GFACT (GIAC Foundational Cybersecurity Technologies) 10 or more years of experience in engineering MA/MS= 10 years; BS=12 years Qualifications WORK ENVIRONMENT AND PHYSICAL DEMANDS The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Location: Honolulu, HI Type of environment: Office Noise level: Low Work schedule: CONUS Schedule is day shift Monday - Friday. May be requested to work evenings and weekends to meet program and contract needs. Amount of Travel: Less than 20% PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. WORK AUTHORIZATION/SECURITY CLEARANCE United States Citizenship Top Secret Clearance requirement WAGE INFORMATION Target salary range: $133,000.00 - $165,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual's particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees. OTHER INFORMATION Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment. Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements. EQUAL EMPLOYMENT OPPORTUNITY In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as "protected status"). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.

Job Description Job Description Description: US CITIZENSHIP, DoD SECRET SECURITY CLEARANCE IS REQUIRED. If your resume does not clearly state that you have an active DoD Secret security clearance, auto-filtering tools will reject/remove your application. EXPERIENCE for Senior Security Network Engineer position: Eight (8) years' experience in network security, demonstrating strong experience with Cisco Prime Infrastructure, understanding of IEEE 802.11 protocols, familiarity with TCP/IP (specifically Layers 3/4), and switching and routing protocols (internet standards and general architecture) and associated hardware. ReadSeal Experience Cisco ASA Cisco Firepower Switching and Troubleshooting Cisco Wireless LAN Controller Cisco DNA Center Bluecoat Proxy RSA Server Cisco ISE This is a Cyber Security Workforce IAT II position- Must hold one of the following active certifications: IAT Level III CISSP/CCNP-Routing or CCNP Security Requirements: EDUCATION for Senior Security Network Engineer: Minimum Education: Bachelor's degree in Information Technology, Computer Science, or an equivalent technical degree from an accredited college or university. Benefits for a Senior Security Network Engineer: As a team member of EHS Technologies, you'll have available benefits including Bonus Eligibility, No Cost Full Coverage Health Insurance, available Pet Insurance, industry high 401k matching among many other excellent benefits and up to 26 days of holiday and PTO EHS Technologies is an Equal Opportunity Employer.

Job Description Job Description Description: Target Education: Bachelor's degree in information technology, computer science, or an equivalent technical degree from an accredited college or university. Target Experience: Eight (8) years' experience in network security (CCNP-Routing or CCNP Security), demonstrating strong experience with Cisco Prime Infrastructure, understanding of IEEE 802.11 protocols, familiarity with TCP/IP (specifically Layers 3/4), and switching and routing protocols (internet standards and general architecture) and associated hardware. Applicant must be a US citizen and hold a DoD Secret clearance. Requirements:

Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Requisition #: 1853 Job Title: Network Security Engineer Location: Suitland, MD Clearance Level: Public Trust Job Description Agile Defense is seeking a Senior Network Security Engineer to support the agency as it moves away from its legacy ForeScout CounterACT NAC/NAM system and adopts Cisco Identity Services Engine (ISE) as the new access control platform. The engineer will help configure and manage Cisco ISE across the environment, handling AAA services, wired and wireless 802.1X authentication, device administration, and posture checks for users and devices. This role also supports the agency's modernization work by improving authentication processes, updating ISE policies, and strengthening identity-based access controls. The engineer will troubleshoot access issues, refine policy designs, and help ensure users and devices can connect securely and reliably as the organization completes its transition from ForeScout to Cisco ISE. Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication. Deploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement. Support the agency's migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets. Provide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams. Configure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control. Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows. Deploy, configure, and maintain Cisco ISE components, including: o Policy Sets, Authorization Profiles, and Authentication Rules o TACACS+ device administration o 802.1X for wired and wireless networks o Profiling, posture, and compliance policies o Certificate based authentication and PKI integrations Monitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues. Manage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience. Perform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures. Work closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts. Education and Background Bachelor's degree in Information Technology, Cybersecurity, or a related field. Years of Experience Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE. Four (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls. Required Skills Senior Network Security Engineer responsible for designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform, including TACACS+/RADIUS services, device administration policies, and wired/wireless 802.1X authentication. Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE with expertise in: o Authentication and authorization policies (RADIUS/TACACS+) o 802.1X/EAP methods for wireless and wired access o Device profiling, posture checks, and endpoint compliance o Certificate based authentication (EAP TLS) and PKI integration o AAA integrations for switches, appliances, firewalls, and wireless controllers Experience working with Cisco ISE deployed on Cisco SNS 3715 appliances, preferably in a two node clustered, high availability setup. Understanding of ForeScout CounterACT, including legacy NAC/NAM policies, device classification, and access workflows, to support the migration to Cisco ISE Experience providing general wireless network support, including basic troubleshooting, controller interactions, and wireless access workflows. Hands on experience integrating Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based policy decisions, and directory based authentication. Experience supporting Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest/registration page redirection and wireless onboarding. Experience migrating legacy NAC, RADIUS, or device authentication systems into Cisco ISE while aligning with Zero Trust principles. Solid understanding of telecommunications, network security, and Zero Trust best practices. Strong communication skills with the ability to explain Cisco ISE, NAC/NAM, and AAA concepts to both technical and non technical audiences. Preferred Skills Preferred certifications: Cisco CCNP Security, Cisco ISE Specialist, or similar identity/security certifications. Working Conditions On-site 5 days a week in Suitland, Maryland In addition, Agile Defense invests in its employees beyond just compensation. Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Job Description Salary Range: $93 000.00 per year Role and Responsibilities: Full time Principal Field Engineer supporting numerous installations at Surface Warfare Engineering Facility (SWEF), PHD labs and the network infrastructure at NAVSEA PHD. The position demands a high level of expertise, leadership and ability to manage the Self Defense Test Ship (SDTS) Test Ship Remote Control Network (TSRCN). The system includes a network spanning 5 physical locations including the SDTS. The Network consists of approximately 30 switches made up of mostly Cisco 9300 switches and includes multiple VLANS, MACSEC encryption, as well as Ether channels. Position Qualifications: • Bachelor's degree in a technical field and minimum of 8-10 years of network experience or no degree and a minimum of 14 years of direct network experience supporting technical projects. • Must be able to work with a small team of engineers to install, operate, maintain, and troubleshoot all aspects of the Test Ship Remote Control System. • Must be able to provide system support for the remote control of radars, weapons, combat systems, and navigation of the SDTS. • Must be able to support systems including Windows and Linux computers, video surveillance, phone system, push-to-talk system, camera tracking mount, microwave radios and antennas, and antenna controllers. • Must have a minimum two-years' experience administering Cisco switches and a CCNA, CCNP, or similar Cisco certification. • Must be able to learn and support the installation, operation, and maintenance of other network devices in support of test events on board the SDTS. • Responsible for coordinating and communicating with team members and customers ensuring thateveryone is informed and working towards the same goals. • Able to satisfactorily complete background check, receive and maintain a government clearance. • Able to follow company policies, procedures and complete required training. • Able to write, speak and understand English and write clear, detailed technical monthly reports. Preferred Skills: • Fluent in Windows and Linux • Experience with data radios and antennas • Experience with video encoding/decoding, mp4 • Experience with reading and creating wiring and installation drawings • Experience with military specification circular connectors • Experience with encryption, FIPS 140-2, Type 1 classified encryption • Experience with Naval ships, radars, weapons, combat systems. Physical Requirements: • Must be able to get underway as required to support test events. • Must be able to travel to remote sites (San Nicolas Island, Laguna Peak, and Pt. Mugu) • Must be able to climb up and down shipboard vertical ladders

Job Description Job Description Purpose Information technology is foundational to how Citadel Aviation operates at every site, from the systems that move work across the hangar floor and the shops to the platforms that support administrative staff. Secure, reliable network and identity infrastructure enable Citadel to operate without interruption, protect its work and its people, and meet its obligations to customers and partners. This role owns the design, operation, and security of Citadel's network and identity infrastructure across every Citadel site: reliable connectivity, a hardened identity platform, and a security posture that scales with the business. The role serves as Citadel's internal technical counterpart to the company's security SOC and managed detection and response (MDR) provider, partners with IT leadership and peers across IT and the business, owns assigned IT projects, and is accountable for the reliability of the network and the strength of the security posture across every site. Environment The technology stack includes Palo Alto next-generation firewalls, Cisco switching, Meraki wireless, Microsoft 365 with Entra ID for identity, Microsoft Defender for Endpoint and Intune for endpoint security and management, Tenable for vulnerability management, and KnowBe4 for security awareness. Security operations are delivered in partnership with an external SOC and MDR provider. Essential Job Functions Own the design, operation, and security of Citadel's network infrastructure across all sites. Maintain firewalls, switching, wireless, ISP connectivity, and backup connectivity. Design and implement upgrades to support growth, lead network design and turn-up for new Citadel facilities, and maintain secure connectivity between sites, between sites and the cloud, and for remote users. Own the design, operation, and security of Citadel's voice and unified communications infrastructure, including the company's calling system, VOIP infrastructure, and integration with Microsoft 365 communications. Maintain consistent network and security service quality across all Citadel sites. Travel between sites is heavier during the initial standardization phase across existing sites and during turn-up of new sites, and lighter once the environment reaches steady state. Perform in line with established KPIs and service-level targets, including network availability, security patch SLA, mean time to remediate vulnerabilities, mean time to respond to security incidents, and related measures. Track and report performance regularly to IT leadership. Serve as the internal technical counterpart to the company's security SOC and MDR provider, who operate detection, monitoring, and response. Partner closely on detection tuning, alert triage, investigation, and remediation. Own endpoint security policy across the Microsoft 365 platform, including Microsoft Defender for Endpoint configuration, conditional access, identity hardening, and Intune security baselines. Partner with the IT manager and the support team on day-to-day operation and enforcement. Own technical email security controls, including anti-phishing, anti-malware, secure transport, and tenant security configuration. Partner with the IT manager on user-facing reporting and response workflows. Run Citadel's vulnerability management process in partnership with the MDR provider. Operate scanning tooling, prioritize findings, and drive remediation across the IT organization. Own identity and access management hardening, including multi-factor authentication, conditional access policy, privileged access controls, and account lifecycle hygiene. Set program direction and content for Citadel's cybersecurity awareness program, including training plans, phishing simulation strategy, and ongoing user education topics. Partner with the IT manager, who runs the user-facing activities and reporting. Conduct third-party security review of new vendors, software platforms, and integrations before they enter the environment. Assess data handling, integration security, and ongoing risk; track approval and remediation. Coordinate Citadel's response to external security assessments, including penetration testing, cyber insurance reviews, customer security questionnaires, and regulatory inquiries. Scope engagements, work with vendors, maintain evidence, and track remediation. Deliver assigned IT projects within networking and security, and contribute to broader IT initiatives. Coordinate with IT leadership and peers, and engage external specialists and contractors as needed. Partner with IT leadership and peers in infrastructure, support, and software development on initiatives originating in those service lines. Contribute network and security expertise to keep delivery on track. Own vendor relationships within the network and security portfolio, including ISPs, network hardware, security tooling, and specialized contractors. Take on broader IT vendor relationships as assigned. Own the network and security operating budget, with broader budget scope as assigned. Track expenses, project upcoming needs, and provide input on annual IT budget planning. Own the on-call rotation for network and security incidents. Drive diagnosis, coordinate internal and external resources, and engage directly in resolution. Own incident communication for network and security events. Notify IT leadership and impacted business stakeholders, provide regular status updates throughout an incident, and deliver post-incident summaries with root cause and follow-up actions. Conduct periodic internal security audits across user access, identity hygiene, configuration baselines, vulnerability posture, and policy adherence. Remediate findings in partnership with the IT manager. Maintain and enforce IT network and security policies, procedures, runbooks, technical documentation, and asset inventory. Contribute to the creation and modification of policies as needed. Identify and propose improvements in network design, security posture, monitoring coverage, and tool consolidation. Deliver approved initiatives. Non-Essential Functions Running cables and installing hardware. Other duties as assigned. Minimum Qualifications or Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, or a related technical discipline. Equivalent professional experience considered in lieu of degree. 5+ years of progressive experience in enterprise network engineering and information security. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Experience operating in partnership with a managed detection and response (MDR) provider or security operations center (SOC). Experience with vulnerability management, including scanning tooling (Tenable Nessus or comparable), prioritization, and driving remediation across an organization. Experience operating in an environment with regular external security assessments (penetration testing, cyber insurance reviews, customer security audits) and remediating findings under deadline. Experience supporting multi-site operations or production environments where uptime, security, and consistency of service are operational requirements. Experience delivering IT projects from scope through completion, including scheduling, vendor coordination, and budget tracking. Demonstrated ability to communicate technical concepts clearly to non-technical business stakeholders and to senior leadership. Demonstrated experience adhering to and enforcing security best practices across network, endpoint, and identity domains. Preferred Qualifications or Experience Experience in aviation, aerospace, manufacturing, MRO, or other regulated operational environments. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Active IT industry certifications such as CompTIA Security+ or Network+, Cisco CCNA / CCNP, Palo Alto PCNSA / PCNSE, Microsoft Security or Identity certifications, CISSP, GIAC, or comparable. Experience designing and bringing up network infrastructure at new sites or facilities. Experience with SD-WAN, zero-trust architecture, network segmentation, or related modern network design patterns. Familiarity with security frameworks (NIST, CIS) and audit or compliance work. Experience with security awareness platforms (KnowBe4 or comparable). Experience administering identity and access controls in a hybrid or cloud-first environment. Experience with VOIP or unified communications infrastructure. Supervisory Responsibilities This position has no direct reports. Coordinates day-to-day with external network and security contractors, managed-service providers, and the company's SOC and MDR partner. Provides technical guidance and security expertise to IT team peers and to business stakeholders as needed. Knowledge, Skills, and Other Attributes Deep technical expertise across enterprise networking (firewalls, switching, wireless, routing) and information security (endpoint, identity, vulnerability management, security monitoring). . click apply for full job details