Job description

Education Requirements: Bachelor's degree in computer science or related field; or equivalent relevant experience is required, plus a minimum of 8 years of relevant experience; or Master's degree plus a minimum of 6 years of relevant experience. Clearance Requirements: Department of Defense Secret security clearance is required at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required. This role will help improve network resilience, reduce single-point-of-failure risk, stabilize network operations, advance site and program deployments. The successful candidate will become a key technical resource for the CUI environment and work closely with Network Architecture, Information Assurance, program teams, vendors, and other IT organizations. The CUI environment supports 23 active programs, approximately nine sites with additional sites planned, network switches, firewalls, and TACLANEs. This role requires a hands-on technical professional who can troubleshoot complex issues, execute secure network changes, support deployments, and help establish a durable operational foundation for the transition to the future eWAN architecture. Key Responsibilities • Provide senior-level administration, maintenance, troubleshooting, and operational support for CUI network infrastructure. • Configure, maintain, and troubleshoot Cisco switching and routing environments, including VLANs, VSS/VSL, OSPF, EIGRP, BGP, IPsec VPNs, DMVPN, and/or L2 eVPN. • Administer and support firewall technologies, including Cisco Firepower Threat Defense (FTD), Firepower Management Center (FMC), Palo Alto firewalls, and Panorama. • Support Cisco Identity Services Engine (ISE), 802.1X authentication, network access controls, and Zero Trust architecture. • Deploy, maintain, and troubleshoot firewall configuration for double-encapsulation requirements. • Configure, maintain, and troubleshoot TACLANE devices; coordinate keying activities and related connectivity requirements as applicable. • Perform network monitoring, analyze performance trends, respond to alerts, investigate incidents, and restore service during outages or degraded network conditions. • Execute patching, vulnerability remediation, configuration-hardening, and network health improvement activities. • Support program and site deployments, site expansions, circuit activations, firewall requests, and related infrastructure changes. • Coordinate with carriers, vendors, site personnel, program teams, Information Assurance, and other IT organizations to resolve technical and operational issues. • Develop and maintain network diagrams, technical documentation, configuration records, asset information, and standard operating procedures. • Support audit preparation, evidence collection, compliance activities, and Information Assurance requirements, including SSP and ATO-related activities. • Partner with the Network Architect on network standardization, modernization, technical projects, and the transition to the future eWAN architecture. • Mentor and provide technical guidance to less-experienced network personnel. • Participate in cross-training activities to provide resilient support across both CUI and classified network environments. Required Qualifications • Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline; equivalent relevant education, certifications, and experience may be considered. • Ten or more years of relevant network administration, network engineering, or network security experience preferred. • Current CCNP and Security+ certifications, or CCNP Security certification. • Secret security clearance required • Strong hands-on experience with Cisco switching and routing technologies, including VLANs, VSS/VSL, OSPF, EIGRP, BGP, and IP addressing/subnetting. • Strong experience with Cisco ISE, 802.1X, and Zero Trust network-access concepts. • Experience administering and troubleshooting IPsec VPN, DMVPN, and/or Layer 2 EVPN technologies. • Hands-on experience with Cisco Firepower Threat Defense and Firepower Management Center. • Experience with Palo Alto firewalls and Panorama. • Experience with Cisco Catalyst Center. • Demonstrated ability to troubleshoot complex network, routing, switching, firewall, and connectivity issues in a multi-site environment. • Ability to execute approved network changes in accordance with security, configuration-management, and change-control processes. • Strong written and verbal communication skills, including the ability to create technical documentation and coordinate effectively with diverse stakeholders. • Ability to work full-time on-site in Scottsdale, Arizona, with occasional on-call support and travel as required. Preferred Qualifications • Experience supporting Department of Defense, classified, CUI, restricted, or air-gapped network environments. • Experience with DoD Comply to Connect requirements. • Knowledge of DoD Security Technical Implementation Guides (STIGs), network hardening, vulnerability remediation, and security compliance practices. • Experience supporting Risk Management Framework (RMF), System Security Plans (SSPs), Authorization to Operate (ATO) activities, audits, or inspections. • Experience with SolarWinds or comparable network monitoring and management tools. • TACLANE configuration, troubleshooting, and operational-support experience. • Experience supporting remote-access infrastructure and secure remote engineering connectivity. • Experience coordinating multi-site deployments, circuit providers, vendors, and field personnel. #CJ3 This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled. USD $126,862.00 - USD $137,269.00 /Yr. General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team! Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans We can recommend jobs specifically for you! Click here to get started.

Requirements

Must-haves

Provide senior-level administration, maintenance, troubleshooting, and operational support for CUI network infrastructure.
Configure, maintain, and troubleshoot Cisco switching and routing environments, including VLANs, VSS/VSL, OSPF, EIGRP, BGP, IPsec VPNs, DMVPN, and/or L2 eVPN.
Administer and support firewall technologies, including Cisco Firepower Threat Defense (FTD), Firepower Management Center (FMC), Palo Alto firewalls, and Panorama.
Support Cisco Identity Services Engine (ISE), 802.1X authentication, network access controls, and Zero Trust architecture.
Deploy, maintain, and troubleshoot firewall configuration for double-encapsulation requirements.
Configure, maintain, and troubleshoot TACLANE devices; coordinate keying activities and related connectivity requirements as applicable.
Perform network monitoring, analyze performance trends, respond to alerts, investigate incidents, and restore service during outages or degraded network conditions.
Execute patching, vulnerability remediation, configuration-hardening, and network health improvement activities.
Support program and site deployments, site expansions, circuit activations, firewall requests, and related infrastructure changes.
Coordinate with carriers, vendors, site personnel, program teams, Information Assurance, and other IT organizations to resolve technical and operational issues.
Develop and maintain network diagrams, technical documentation, configuration records, asset information, and standard operating procedures.
Support audit preparation, evidence collection, compliance activities, and Information Assurance requirements, including SSP and ATO-related activities.
Partner with the Network Architect on network standardization, modernization, technical projects, and the transition to the future eWAN architecture.
Mentor and provide technical guidance to less-experienced network personnel.
Participate in cross-training activities to provide resilient support across both CUI and classified network environments.

Nice-to-haves

Ten or more years of relevant network administration, network engineering, or network security experience preferred.
Experience supporting Department of Defense, classified, CUI, restricted, or air-gapped network environments.
Experience with DoD Comply to Connect requirements.
Knowledge of DoD Security Technical Implementation Guides (STIGs), network hardening, vulnerability remediation, and security compliance practices.
Experience supporting Risk Management Framework (RMF), System Security Plans (SSPs), Authorization to Operate (ATO) activities, audits, or inspections.
Experience with SolarWinds or comparable network monitoring and management tools.
TACLANE configuration, troubleshooting, and operational-support experience.
Experience supporting remote-access infrastructure and secure remote engineering connectivity.
Experience coordinating multi-site deployments, circuit providers, vendors, and field personnel.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: icims
Effort: medium