Network Engineer

JOB STATUS: Full-timeCLEARANCE: Active Top Secret (TS/SCI Preferred)

TRAVEL: As NeededSALARY RANGE: $145k - $165k Astrion has an exciting opportunity for a highly experiencedSenior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting Department of Defense/Department of War (DoD/DoW) environments. The ideal candidate brings deep expertise in Cisco and Fortinet technologies, extensive experience operating withinclassified networks, and a proven track record of implementing and maintaining systems in compliance withRisk Management Framework (RMF), DoD STIGandCross Domain / Comply-to-Connect (C2C)requirements. REQUIRED QUALIFICATIONS / SKILLSActive Top Secret security clearance. TS/SCI preferredBachelor's degree in Network Engineering, Computer Science, or related field (or equivalent experience)8+ years of experience in network engineering within Department of Defense/Department of War (DoD/DoW) or classified environmentsDeep expertise in: Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS) Fortinet solutions (FortiGate, FortiOS, VPNs, security fabric) Demonstrated experience implementing and maintainingDISA STIG complianceHands-on experience withC2C / Cross Domain architecturesand security controlsStrong understanding of: RMF (Risk Management Framework)DISA security requirements and accreditation processesDCSA Accreditation StandardsActive DoD 8140 (formerly DoD 8570) compliant industry certification (e.g., Security+ CE, CISSP, etc.)Active DoD 8140 (formerly DoD 8570) compliant environment certification (e.g., minimum Cisco CCNP) Experience with C2C Requirements: Network automation (Python, Ansible) Zero Trust architecturesSIEM integration and log analysisNetFlow monitoringKEY COMPETENCIESAdvanced network design and troubleshootingSecurity hardening and compliance enforcementStrong analytical and problem-solving abilitiesExcellent communication and documentation skillsAbility to operate in high-security, mission-critical environmentsPREFERRED QUALIFICATIONS / SKILLSCCIE (Enterprise or Security) Fortinet NSE 4–7 certificationsProject Management ExperienceExperience briefing Executive LeadershipPrior experience supportingCross Domain Solutions (CDS)programsExperience with cloud-based DoD environments (e.g., Azure Government, Azure Secret)

RESPONSIBILITIES: Design, implement, and maintain secure network architectures usingCisco (routing/switching, ISE) andFortinet (FortiGate)solutionsDesign, implement, and maintain 802.1x compliance platformEngineer and supportclassified and unclassified network environments(e.g., MDA CNET, NIPR, SIPR, JWICS as applicable) Ensure compliance withDoD Security Technical Implementation Guides (STIGs)and cybersecurity policiesImplement and maintainCross Domain Solutions (CDS)andComply-to-Connect (C2C)architecturesPerform network hardening, vulnerability remediation, and continuous monitoring in accordance with RMF controlsDevelop and maintainnetwork documentation, diagrams, SOPs, and security artifactsSupportAuthority to Operate (ATO)processes, including STIG checklists, POA&Ms, and risk assessmentsTroubleshoot complex network and security issues across multi-vendor environmentsCollaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operationsSupport audits, inspections, and compliance validation activities#CJ"Enabling Services"#LI-LP1