Job description

At PMAT, we work on mission critical systems that directly support the warfighter, designing, building, and securing modern digital capabilities across cloud, data, and software environments. Our teams tackle complex, real-world challenges where delivery matters more than theory, and innovation is driven by curiosity, collaboration, and purpose. In this role, you’ll contribute to mission-focused technology initiatives, working alongside engineers and technical teams to deliver resilient, forward-leaning solutions in support of national defense. About the role: PMAT is seeking a Systems Network Engineer II to support the design, configuration, integration, and sustainment of secure network infrastructure across distributed computing, cloud, and software environments. This mid-level role will work across on-premises lab and test environments, cloud infrastructure, and distributed platforms to maintain reliable and secure connectivity. The candidate will collaborate with network engineers, cloud and platform teams, cybersecurity personnel, software developers, and other technical stakeholders to troubleshoot network issues, maintain network documentation, implement access controls, and support evolving infrastructure capabilities. The ideal candidate possesses strong foundational networking skills, hands-on troubleshooting experience, and an interest in expanding their expertise across cloud networking, containerized environments, network automation, and modern infrastructure technologies. Responsibilities: Configure, maintain, and troubleshoot Layer 2 and Layer 3 network infrastructure supporting on-premises, laboratory, test, cloud, and distributed computing environments. Support network connectivity by integrating compute nodes, network infrastructure, and cloud or on-premises backend services. Develop and maintain network topology diagrams, data-flow documentation, configuration records, interface information, and other technical artifacts documenting system connectivity and network dependencies. Configure and maintain network security controls, including Access Control Lists (ACLs), firewall policies, traffic filtering rules, ports and protocols, and network segmentation to support least-privilege access. Deploy, monitor, troubleshoot, and maintain secure remote and site-to-site connectivity using IPsec, SSL/client-based VPNs, and other approved communications technologies. Monitor network health, availability, throughput, packet loss, and latency using network monitoring and diagnostic technologies while troubleshooting L2/L3 issues affecting applications and infrastructure. Support provisioning and configuration of cloud networking components, including VPCs/VNets, subnets, route tables, peering connections, security controls, and private endpoints used to connect cloud services with enterprise and distributed computing environments. Support network security hardening, configuration reviews, vulnerability remediation, port and protocol reviews, and implementation of applicable cybersecurity requirements and technical security baselines. Collaborate with senior network engineers, cloud and platform teams, cybersecurity personnel, software developers, and infrastructure engineers to resolve complex connectivity issues and support integration, testing, deployment, and sustainment activities. About Us: PMAT is an innovative small business founded with a passion for developing forward-leaning solutions from exceptional people that increase the mission's capability. We focus on designing and building impactful digital solutions that utilize modern cloud, data, and software concepts. Our passion is working on complex and progressive challenges such as edge platform computing, containerizing legacy platforms, distributed data platforms, or heterogeneous data analysis. We recruit, retain, and foster a team motivated to pursue passions, investigate new ways of doing things, and embody an innovative and entrepreneurial spirit. We believe in being curious about every element of a problem and experiment relentlessly. We foster continuous learning in an environment that encourages positive collaboration and expands our capabilities. We tap into collective intelligence, acknowledging that the most brilliant people may not be in the room. Above all else, we believe that delivering and demonstrating is more potent than a sheet of paper. We are passionate about mission-centric design and delivering effective capabilities to and for the warfighter. Whether you’re an experienced engineer or just beginning your career, you’ll work alongside experts who are committed to solving mission-critical problems. If you’re passionate about using your skills to make a real difference, apply today and become part of a team that’s shaping the future of defense technology! Required Skills and Experience: Strong foundational experience in network engineering, network administration, systems networking, infrastructure engineering, or related technical roles. Experience configuring, maintaining, and troubleshooting Layer 2 and Layer 3 networks, including switching, routing, VLANs, subnets, and network segmentation. Understanding of core networking concepts and protocols, including TCP/IP, DNS, DHCP, routing, ports and protocols, and network addressing. Experience configuring or supporting firewalls, ACLs, VPNs, traffic filtering, network access controls, or other network security technologies. Experience troubleshooting network connectivity, performance, latency, routing, and configuration issues using network monitoring and diagnostic tools. Experience developing or maintaining network diagrams, topology documentation, configuration records, data-flow diagrams, or other network engineering documentation. Understanding of cybersecurity principles, network hardening, least-privilege access, vulnerability remediation, and secure network configuration practices. Strong analytical and problem-solving skills with the ability to troubleshoot technical issues across networks, systems, applications, and infrastructure. Strong written and verbal communication skills with the ability to collaborate effectively with network, cloud, cybersecurity, software, infrastructure, and engineering teams. Preferred Skills and Experience: Experience supporting distributed computing, edge computing, robotics, or other complex technology environments. Familiarity with AWS, Azure, GCP, or similar cloud platforms and networking constructs such as VPCs/VNets, subnets, route tables, peering, private endpoints, gateways, and cloud security controls. Familiarity with enterprise network monitoring and diagnostic technologies such as SNMP, NetFlow/sFlow, Wireshark, packet analyzers, or similar tools. Familiarity with Kubernetes and container networking concepts, including Container Network Interfaces (CNIs), Pod-to-Pod communication, Services, Ingress controllers, and containerized microservice connectivity. Familiarity with network or infrastructure automation using Terraform, Ansible, Python, Bash, or similar automation and Infrastructure as Code technologies. Familiarity with Zero Trust architectures, network segmentation, identity-aware networking, or other modern network security approaches. Familiarity with CIS Benchmarks, NIST guidance, STIGs, or other security baselines applicable to network infrastructure. Experience supporting hybrid environments connecting on-premises infrastructure, cloud services, distributed computing platforms, and geographically distributed systems. Experience supporting regulated, security-sensitive, or other mission-critical network environments. Demonstrated ability and interest in expanding technical expertise across cloud infrastructure, container networking, automation, and emerging network technologies. Education and Certification Requirements: Bachelor’s Degree or Equivalent Experience Current Security+ Certificate Preferred Citizenship and Clearance Requirements: U.S. Citizenship required No dual citizenship TS/SCI eligible; security clearance required Location/Address: 100% On-site San Diego, CA Travel & Passport: 5%, CONUS and OCONUS Work Environment: PMAT offices as needed. In some cases, work in a government facility may be required. Travel may be required for customer engagement, team coordination, and potentially for business development. PMAT is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered by applicable law.

Requirements

Must-haves

In this role, you’ll contribute to mission-focused technology initiatives, working alongside engineers and technical teams to deliver resilient, forward-leaning solutions in support of national defense.
Configure, maintain, and troubleshoot Layer 2 and Layer 3 network infrastructure supporting on-premises, laboratory, test, cloud, and distributed computing environments.
Support network connectivity by integrating compute nodes, network infrastructure, and cloud or on-premises backend services.
Develop and maintain network topology diagrams, data-flow documentation, configuration records, interface information, and other technical artifacts documenting system connectivity and network dependencies.
Configure and maintain network security controls, including Access Control Lists (ACLs), firewall policies, traffic filtering rules, ports and protocols, and network segmentation to support least-privilege access.
Deploy, monitor, troubleshoot, and maintain secure remote and site-to-site connectivity using IPsec, SSL/client-based VPNs, and other approved communications technologies.
Monitor network health, availability, throughput, packet loss, and latency using network monitoring and diagnostic technologies while troubleshooting L2/L3 issues affecting applications and infrastructure.
Support network security hardening, configuration reviews, vulnerability remediation, port and protocol reviews, and implementation of applicable cybersecurity requirements and technical security baselines.
Strong foundational experience in network engineering, network administration, systems networking, infrastructure engineering, or related technical roles.
Experience configuring, maintaining, and troubleshooting Layer 2 and Layer 3 networks, including switching, routing, VLANs, subnets, and network segmentation.
Understanding of core networking concepts and protocols, including TCP/IP, DNS, DHCP, routing, ports and protocols, and network addressing.
Experience configuring or supporting firewalls, ACLs, VPNs, traffic filtering, network access controls, or other network security technologies.
Experience troubleshooting network connectivity, performance, latency, routing, and configuration issues using network monitoring and diagnostic tools.
Experience developing or maintaining network diagrams, topology documentation, configuration records, data-flow diagrams, or other network engineering documentation.
Understanding of cybersecurity principles, network hardening, least-privilege access, vulnerability remediation, and secure network configuration practices.
Strong analytical and problem-solving skills with the ability to troubleshoot technical issues across networks, systems, applications, and infrastructure.
Strong written and verbal communication skills with the ability to collaborate effectively with network, cloud, cybersecurity, software, infrastructure, and engineering teams.
Experience supporting distributed computing, edge computing, robotics, or other complex technology environments.
Familiarity with AWS, Azure, GCP, or similar cloud platforms and networking constructs such as VPCs/VNets, subnets, route tables, peering, private endpoints, gateways, and cloud security controls.
Familiarity with enterprise network monitoring and diagnostic technologies such as SNMP, NetFlow/sFlow, Wireshark, packet analyzers, or similar tools.
Familiarity with Kubernetes and container networking concepts, including Container Network Interfaces (CNIs), Pod-to-Pod communication, Services, Ingress controllers, and containerized microservice connectivity.
Familiarity with network or infrastructure automation using Terraform, Ansible, Python, Bash, or similar automation and Infrastructure as Code technologies.
Familiarity with Zero Trust architectures, network segmentation, identity-aware networking, or other modern network security approaches.

Nice-to-haves

Current Security+ Certificate Preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuregcpkubernetespython

Platform: bamboohr
Effort: medium

Benefits

Benefits detected in the listing.

Vision