IT Networking Engineer (Cisco ISE)

Geosyntec Consultants; Amarillo (TX); On-site; USD 90,000 - 140,000; Full time

Job summary

Geosyntec Consultants seeks an IT Networking Engineer (Cisco ISE) to support critical missions in Amarillo, TX. The role emphasizes secure network operations, policy administration, and integration with AD/LDAP/MFA/SAML across wired, wireless, and VPN domains.

Must have DoD Top Secret or DOE Q clearance eligibility, U.S. citizenship, and the ability to pass a federal background check. Onsite-only, full-time with competitive pay and benefits.

Qualifications

• At least 5 years of relevant experience or equivalent.
• Experience with Cisco Identity Services Engine (ISE).
• Knowledge of Cisco enterprise routing and switching.
• Experience with security compliance, STIGs, and vulnerability remediation.
• Must possess an active DoD Top Secret (TS) clearance or DOE Q Clearance, or have previously held one and be eligible for reinstatement.
• Ability to work with classified information and comply with security requirements.
• U.S. Citizenship is required due to federal contract security requirements.
• Candidates must pass a federal background investigation to secure and maintain DOE Q clearance.
• Health & Safety training, medical monitoring, and client-driven drug and background testing are required.

Responsibilities

• Maintain 99.9% uptime for core network infrastructure and data center fabrics.
• Maintain 99.9% availability of Cisco ISE Policy Administration and Policy Service Nodes.
• Resolve authentication and authorization incidents within SLAs.
• Administer AD/LDAP/MFA/SAML integrations.
• Manage Network Access Devices including switches, wireless controllers, and VPN gateways.
• Maintain STIG compliance and remediate vulnerabilities.
• Manage certificate lifecycle and prevent outages due to expiry.
• Administer profiling, posture, and authorization policies.
• Configure DHCP, HTTP, RADIUS, SNMP, DNS, NetFlow, and AD profiling probes.
• Develop upgrade plans, backups, documentation, and topology diagrams.
• Support network operations including routers, switches, load balancers, DNS, DHCP, and IPAM.

Skills

Cisco ISE

AD/LDAP integration

MFA/SAML

Security compliance

Vulnerability remediation

DoD/DOE clearance

US Citizenship

Routing & Switching

Active Directory

Background check

Education

Bachelor's degree

Master's degree

10+ years experience (equiv)

Tools

Tenable Vulnerability Management

Splunk

DNA Center

LTM/GTM

DNS/DHCP/IPAM

Job description

IT Networking Engineer (Cisco ISE)

Job Details

• Primary Location: US-TX-Amarillo
• ID: 2026-4815
• Category: Information Technology
• Position Type: Regular Full-Time
• Remote: No

Overview

Longenecker & Associates (L&A), a Geosyntec Company, is a trusted partner enabling critical missions across the U.S. Department of Energy (DOE) complex for more than 30 years. We contribute to DOE's nuclear security and environmental remediation enterprise by providing the highest-caliber staff and experts. We are seeking a motivated IT Networking Engineer (Cisco ISE) to contribute to our mission supporting our work at Pantex in Amarillo, TX.

Geosyntec is an innovative, international engineering and consulting firm serving private and public-sector clients to address new ventures and complex problems involving our environment, natural resources, and civil infrastructure. Our engineers, scientists, technical and project employees serve our clients from offices across the world. Ranked by ENR as one of the top environmental engineering design firms, Geosyntec is internationally known for its technical leadership, broad experience, and exceptional client service.

We invest in our people. Each employee is unique, and your career at Geosyntec will be too. We offer competitive pay and benefits, and well-being programs to support you and your family.

To Learn More Visit: http://www.geosyntec.com/careers/

Essential Duties and Responsibilities

• Maintain 99.9% availability of core network infrastructure including routers, switches, and data center fabrics.
• Maintain 99.9% availability of Cisco ISE Policy Administration and Policy Service Nodes.
• Resolve wired, wireless, and VPN authentication and authorization incidents within defined SLAs.
• Administer Active Directory, LDAP, MFA, and SAML integrations.
• Manage Network Access Devices including switches, wireless controllers, and VPN gateways.
• Maintain STIG compliance and remediate security vulnerabilities.
• Manage certificate lifecycle and prevent outages caused by certificate expiration.
• Administer profiling, posture, and authorization policies.
• Configure DHCP, HTTP, RADIUS, SNMP, DNS, NetFlow, and AD profiling probes.
• Develop upgrade plans, backups, documentation, and topology diagrams.
• Support network operations including routers, switches, load balancers, DNS, DHCP, and IPAM

Education and Licensure

• Bachelor's degree in a related field and a minimum of 5 years of relevant experience.
• Master's degree in a related field and a minimum of 2 years of relevant experience.
• Experience in lieu of education: A combination of 10 or more years of relevant education, training, and/or professional experience may be considered in place of the degree requirement.

Skills, Experience and Qualifications

REQUIRED SKILLS, EXPERIENCE AND QUALIFICATIONS:

• At least 5 years of relevant experience or equivalent combination of education and experience. (required)
• Experience with Cisco Identity Services Engine (ISE)
• Knowledge of Cisco enterprise routing and switching.
• Experience with security compliance, STIGs, and vulnerability remediation.
• Must possess an active DoD Top Secret (TS) clearance or DOE Q Clearance, or have previously held one and be eligible for reinstatement. (required)
• Ability to work with classified information and comply with security requirements (required)
• Due to federal contract security requirements, this position requires U.S. Citizenship. (required)
• Due to federal contract security requirements, candidates must be able to successfully pass a federal background investigation to secure and maintain DOE Q security clearance. (required)
• Health & Safety training, medical monitoring, and client-driven drug and background testing. (required)

PREFERRED QUALIFICATIONS & LOCATION DETAILS:

• Cisco Catalyst Center (DNA Center)
• Tenable Vulnerability Management
• Splunk administration and monitoring
• Load Balancers (LTM/GTM)
• DNS DHCP/IPAM administration
• This position is onsite and requires full-time attendance in Amarillo, TX.

Please note that federal contractors are required to maintain a drug-free workplace. Regardless of state laws permitting medical or recreational marijuana use, employees working under federal contracts may be subject to federal requirements that prohibit marijuana use.