Job description

This role requires U.S. citizenship, an active Secret DoD security clearance, and residence in San Diego, CA. At PMAT , we work on mission critical systems that directly support the warfighter, designing, building, and securing modern digital capabilities across cloud, data, and software environments. Our teams tackle complex, real-world challenges where delivery matters more than theory, and innovation is driven by curiosity, collaboration, and purpose. In this role, you’ll contribute to mission-focused technology initiatives, working alongside engineers and technical stakeholders to deliver resilient, forward-leaning solutions in support of national defense. About the role: PMAT is seeking a Network Automation Engineer to provide engineering support for the sustainment, troubleshooting, modernization, and upgrade of complex network infrastructure. The engineer will participate in resolving network issues, implementing configuration updates, improving security posture, and supporting lifecycle sustainment of deployed systems. See below for additional description of duties and responsibilities. Responsibilities: Provide engineering sustainment support for network infrastructure, including troubleshooting, maintenance, configuration updates, and optimization. Lead and assist with upgrades to network configurations and baselines, ensuring compatibility, compliance, and reliability across multiple deployments. Implement and sustain Cisco ISE/NAC solutions, including 802.1X, MAB, AAA, RADIUS, TACACS+, TrustSec policies, C3PL, licensing, and endpoint profiling. Evaluate, mitigate, and implement STIGs on network appliances and systems to improve cybersecurity posture. Develop, maintain, and enhance automation tooling for network sustainment, including Ansible playbooks, PowerShell scripts, and other automation workflows. Troubleshoot issues across Cisco platforms such as routers, switches, firewalls, wireless infrastructure, AnyConnect, and Secure Client. Support engineering analysis and resolution of configuration-specific issues affecting network deployments. Process Engineering Change Requests (ECRs) and work within Agile and DevOps practices to support iterative improvements to network systems. Participate in change management processes, ensuring proper documentation, review, and approval workflows for sustainment updates and configuration changes. Contribute to development and maintenance of configuration documentation, sustainment procedures, technical guides, and engineering artifacts. Collaborate with cross-functional engineering teams and program stakeholders to ensure alignment and smooth execution of sustainment and upgrade activities. About Us: PMAT is an innovative small business founded with a passion for developing forward-leaning solutions from exceptional people that increase the mission's capability. We focus on designing and building impactful digital solutions that utilize modern cloud, data, and software concepts. Our passion is working on complex and progressive challenges such as edge platform computing, containerizing legacy platforms, distributed data platforms, or heterogeneous data analysis. We recruit, retain, and foster a team motivated to pursue passions, investigate new ways of doing things, and embody an innovative and entrepreneurial spirit. We believe in being curious about every element of a problem and experiment relentlessly. We foster continuous learning in an environment that encourages positive collaboration and expands our capabilities. We tap into collective intelligence, acknowledging that the most brilliant people may not be in the room. Above all else, we believe that delivering and demonstrating is more potent than a sheet of paper. We are passionate about mission-centric design and delivering effective capabilities to and for the warfighter. Whether you’re an experienced engineer or just beginning your career, you’ll work alongside experts who are committed to solving mission-critical problems. If you’re passionate about using your skills to make a real difference, apply today and become part of a team that’s shaping the future of defense technology! Required Skills and Experience: Minimum of 3–5 years of professional experience in network or systems engineering, preferably supporting government or defense environments. Hands-on experience with Cisco ISE or NAC technologies, including authentication, authorization, profiling, TrustSec, and policy enforcement. Strong understanding of network security fundamentals and ability to apply and validate STIGs. Experience developing automation artifacts such as Ansible playbooks, PowerShell scripts, or similar tools. Ability to troubleshoot across multiple network baselines, configurations, and deployments. Familiarity with Agile processes, ECR workflows, DevOps concepts, and change management practices. Experience supporting Cisco routers, switches, firewalls, wireless networks, ACL development, and multi-vendor troubleshooting. Ability to work both independently and collaboratively in a fast-paced technical sustainment environment. Preferred Skills and Experience: Experience supporting government, defense, or other security-focused technical organizations. Experience with enterprise network infrastructure, network security, access control, and configuration management. CCNA certification preferred. Education and Certification Requirements: Bachelor’s-level degree in an engineering discipline, or additional 4 years of experience supporting engineering of DoD systems. Current Security+ Certificate preferred, not required. Citizenship and Clearance requirements: US Citizenship required No dual citizenship SECRET security clearance required TS/SCI Eligible security clearance preferred Location/Address: Hybrid San Diego, CA Travel & Passport: 10%, CONUS and OCONUS Work Environment: PMAT offices as needed. In some cases, work in a government facility may be required. Travel may be required for customer engagement, team coordination, and potentially for business development. PMAT is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered under applicable law.

Requirements

Must-haves

This role requires U.S. citizenship, an active Secret DoD security clearance, and residence in San Diego, CA.
In this role, you’ll contribute to mission-focused technology initiatives, working alongside engineers and technical stakeholders to deliver resilient, forward-leaning solutions in support of national defense.
Provide engineering sustainment support for network infrastructure, including troubleshooting, maintenance, configuration updates, and optimization.
Lead and assist with upgrades to network configurations and baselines, ensuring compatibility, compliance, and reliability across multiple deployments.
Implement and sustain Cisco ISE/NAC solutions, including 802.1X, MAB, AAA, RADIUS, TACACS+, TrustSec policies, C3PL, licensing, and endpoint profiling.
Evaluate, mitigate, and implement STIGs on network appliances and systems to improve cybersecurity posture.
Develop, maintain, and enhance automation tooling for network sustainment, including Ansible playbooks, PowerShell scripts, and other automation workflows.
Troubleshoot issues across Cisco platforms such as routers, switches, firewalls, wireless infrastructure, AnyConnect, and Secure Client.
Support engineering analysis and resolution of configuration-specific issues affecting network deployments.
Process Engineering Change Requests (ECRs) and work within Agile and DevOps practices to support iterative improvements to network systems.
Participate in change management processes, ensuring proper documentation, review, and approval workflows for sustainment updates and configuration changes.
Contribute to development and maintenance of configuration documentation, sustainment procedures, technical guides, and engineering artifacts.
Collaborate with cross-functional engineering teams and program stakeholders to ensure alignment and smooth execution of sustainment and upgrade activities.
Minimum of 3–5 years of professional experience in network or systems engineering, preferably supporting government or defense environments.
Hands-on experience with Cisco ISE or NAC technologies, including authentication, authorization, profiling, TrustSec, and policy enforcement.
Strong understanding of network security fundamentals and ability to apply and validate STIGs.
Experience developing automation artifacts such as Ansible playbooks, PowerShell scripts, or similar tools.
Ability to troubleshoot across multiple network baselines, configurations, and deployments.
Familiarity with Agile processes, ECR workflows, DevOps concepts, and change management practices.
Experience supporting Cisco routers, switches, firewalls, wireless networks, ACL development, and multi-vendor troubleshooting.
Ability to work both independently and collaboratively in a fast-paced technical sustainment environment.

Nice-to-haves

CCNA certification preferred.
Current Security+ Certificate preferred, not required.
TS/SCI Eligible security clearance preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agile

Platform: bamboohr
Effort: medium