Data Center Engineer

SandTech; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

SandTech is seeking a Data Center Engineer to support mission-critical enterprise networking at a DoD facility in the Washington, DC area. The role prioritizes high availability, secure configuration, and reliable operation of classified and unclassified networks.

The position requires a DoD Secret clearance, a CS/engineering background, and extensive experience with Cisco Catalyst/Nexus, TACLANE/HAIPE, and security hardening standards. On-site work with occasional telework per mission needs.

Qualifications

• Seven+ years of progressive, hands-on network engineering experience in secure enterprise or data center environments.
• Experience configuring and maintaining Cisco Catalyst and Nexus switching and routing platforms.
• Hands-on administration of Cisco Catalyst Center, Cisco ISE, and F5 BIG-IP LTM or GTM.
• Experience with TACLANE or HAIPE devices, including configuration, keying, and maintenance.
• Knowledge of DISA STIG application, network hardening, and compliance remediation.
• Knowledge of multicast protocols including PIM and IGMP, and SNMP monitoring tools such as Cacti.
• Ability to troubleshoot mission-critical networks and coordinate service restoration and technical changes.

Responsibilities

• Deploy, configure, and maintain high-availability data center routing and switching equipment, including Cisco Catalyst and Nexus platforms.
• Maintain accurate rack elevation drawings, port and patch maps, cable documentation, and network asset records.
• Identify single points of failure and implement redundancy and resilience improvements.
• Administer Cisco Catalyst Center, Cisco ISE, and F5 BIG-IP services supporting network management, access control, and traffic distribution.
• Configure and maintain TACLANE and other authorized HAIPE encryption devices in accordance with security procedures.
• Implement DISA STIG hardening and coordinate remediation of network/boundary findings.
• Monitor network health and capacity through SNMP-based tools and troubleshoot complex service degradations.
• Support multicast routing, including PIM and IGMP, for enterprise network services.
• Coordinate approved service interruptions, changes, rollback plans, and technical communications with stakeholders.
• Maintain SOPs and runbooks, support recovery exercises, and participate in Tier 3 on-call rotation.

Skills

Network engineering

DoD clearance

Cisco networking

SNMP monitoring

Multicast routing

Education

Bachelor's degree in CS/IT/CE or related

Master's degree with 3 years experience or 10 years experience without degree

Tools

Cisco Catalyst & Nexus

Cisco Catalyst Center

Cisco ISE

F5 BIG-IP

TACLANE/HAIPE

DISA STIG tooling

SNMP monitoring (Cacti)

Job description

At SandTech Solutions, we are committed to “Enabling Success” of our clients’ missions. We are seeking a Data Center Engineer to support mission-critical enterprise networking infrastructure at Joint Base Andrews, Maryland. The position supports availability, secure configuration, and operational reliability of network systems in classified and unclassified environments.

1. Security Clearance

Active DoD Secret security clearance required.

2. Education & Certifications

Bachelor’s degree in computer science, information technology, computer or electrical engineering, or a related technical field.

The requisition also allows a master’s degree in a relevant field with three years of experience, or ten years of intensive, progressive relevant experience without a degree.

Cisco CCNA or CCNP Enterprise is listed in the source. DoD 8140 IAT Level II or III requirements are also referenced; the exact compliant certification pathway requires confirmation. CompTIA Security+ CE is described as optional.

3. Key Responsibilities

• Deploy, configure, and maintain high-availability data center routing and switching equipment, including Cisco Catalyst and Nexus platforms.
• Maintain accurate rack elevation drawings, port and patch maps, cable documentation, and network asset records.
• Identify single points of failure and implement redundancy and resilience improvements.
• Administer Cisco Catalyst Center, Cisco ISE, and F5 BIG-IP services supporting network management, access control, and traffic distribution.
• Configure and maintain TACLANE and other authorized HAIPE encryption devices in accordance with applicable security procedures.
• Implement DISA STIG hardening and coordinate remediation of network and boundary-protection findings.
• Monitor network health and capacity through SNMP-based tools and troubleshoot complex service degradations.
• Support multicast routing, including PIM and IGMP, for enterprise network services.
• Coordinate approved service interruptions, changes, rollback plans, and technical communications with operational stakeholders.
• Maintain SOPs and runbooks, support recovery exercises, and participate in the Tier 3 on-call rotation.

4. Required Qualifications

• Seven or more years of progressive, hands-on network engineering experience in secure enterprise or data center environments, as specified in the requisition’s additional details.
• Experience configuring and maintaining Cisco Catalyst and Nexus switching and routing platforms.
• Hands-on administration of Cisco Catalyst Center, Cisco Identity Services Engine, and F5 BIG-IP LTM or GTM.
• Experience with TACLANE or HAIPE devices, including configuration, keying, and maintenance.
• Knowledge of DISA STIG application, network hardening, and compliance remediation.
• Knowledge of multicast protocols including PIM and IGMP, and SNMP monitoring tools such as Cacti.
• Ability to troubleshoot mission-critical networks and coordinate service restoration and technical changes.

5. Preferred Qualifications

• Python scripting and Ansible automation for network provisioning and configuration auditing.
• Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) experience.
• IPv6, dual-stack networking, and associated routing protocol expertise.
• Experience supporting air-gapped or classified networks, including SIPRNet.
• Prior support of Air Force or National Capital Region enterprise infrastructure.
• Experience with RSA Authentication Manager and disaster recovery operations.

6. Work Environment & Physical Requirements

Full-time onsite at Joint Base Andrews, Maryland; ad-hoc telework may be authorized as mission permits.

Day shift. Participation in a recurring Tier 3 operational on-call rotation is expected.

Work involves sustained computer-based duties and coordination with network, security, and facility personnel. Specific physical lifting requirements were not provided in the requisition.