Network EngineerPay: $150,000.00 - $165,000.00 per yearJob description:Department Information TechnologyWe are seeking a highly motivated Network Engineer to join our team! We partner with the U.S. national defense community to create fully integrated, resilient, and innovative digital solutions that enable smart, real-time decision-making.
We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal is to enhance the nation's ability to identify, address, and act — no matter what challenges arise.Location: On-Site in Indian Head, MD Clearance: Secret clearance requiredRole OverviewThis role is responsible for the end-to-end design, implementation, and evolution of a secure, private, air-gapped OT network. The engineer will be the initial and sole network authority, owning technical decisions from assessment through deployment, with designs reviewed and certified by external stakeholders.Core ResponsibilitiesAssess the existing network and industrial infrastructure, including switches, firewalls, cabling, and servers, to determine:Hardware reuse opportunitiesUpgradability and lifecycle risksSecurity and compliance gaps relative to DoD / Navy standardsSecurity posture and compliance riskOperational reliability and uptimeCost, procurement lead time, and vendor supportabilityDesign a private, air-gapped OT network architecture from the ground up, including:VLAN and subnetting strategy aligned to industrial control boundariesSecure zoning between PLCs, HMIs, control rooms, and server roomsIsolation between multiple control/manufacturing groups with no lateral communicationArchitect and implement a private OT network that integrates with a newly deployed private 5G backbone being built and operated by a separate team, integrating:Private 5G connectivity between control rooms, server rooms, and operational areasFiber connectivity from manufacturing buildings to their associated control roomsClear security boundaries between wireless, fiber, and core infrastructureHands-on implementation of all network infrastructure, including:Racking, cabling, labeling, and power coordinationConfiguration of Cisco and Dell network equipmentFirewall rules, routing, switching, and management plane accessEnable secure OT data flows, including:PLC ?
HMI communication within control roomsControlled PLC/HMI data forwarding to centralized server infrastructureProtection of industrial systems from unintended access or broadcast trafficProduce and maintain authoritative network documentation to support compliance certification, including:Logical and physical network diagramsIP address management and VLAN mapsAs-built and as-designed artifactsClear security boundaries and documentation for RMF/STIG reviewLogging, segmentation, and access controls required for auditabilityBuild the network as a scalable platform, not a one-off deployment, ensuring:Additional control/manufacturing groups can be added with minimal redesignCapacity, addressing, and segmentation can evolve over timeServe as the technical authority for network decisions, working with stakeholders to:Explain trade-offs and risks clearlySupport procurement, installation, and acceptance activitiesGuide future expansion and modernization effortsRequired Experience & SkillsMinimum of 5 years' experience as a hands-on network engineerProven experience designing and implementing industrial / OT networksStrong hands-on background with:Enterprise switches and firewalls (Cisco and Dell preferred)Server configuration (Linux and Windows), Windows workstationsFiber and copper cabling in industrial environmentsVLANs, subnetting, routing, and network segmentationExperience working in air-gapped or highly restricted environmentsFamiliarity with DoD / Navy cybersecurity expectations, including designing systems that can be certifiedUnderstanding of PLC, HMI, and industrial data flowsAbility to operate independently and make sound technical decisions with minimal oversightStrong documentation and communication skillsBachelor's degree from an accredited college or university in Computer Engineering, Computer Science, Cybersecurity, or related discipline, or equivalent military experienceMinimum of DoD 8140 / DoD 8570 IASAE Level II certificationStrong attention to detail and organizational skillsExcellent communication skillsEqual Opportunity EmployerAll employment opportunities are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identityJob Type: Full-timeWork Location: In person