NETWORK ADMINISTRATOR

Quantum Research International Inc; Colorado Springs (CO); On-site; USD 95,000 - 135,000; Full time

Job summary

Quantum Research International, Inc seeks an experienced Network Administrator for a DoD SCIF environment in Colorado Springs. You will manage and secure layered network infrastructure, configure routers, switches, firewalls, and VPNs, and ensure compliance with DISA STIGs.

The role requires DoD Secret clearance with potential TS/SCI upgrade, strong TCP/IP knowledge, and hands-on experience with Palo Alto firewalls, Cisco switches/routers, and RMF/audits.

Qualifications

• Must possess active DoD Secret clearance with the ability to upgrade to TS/SCI
• Must have experience in installing, testing, and supporting information systems and/or networks.
• Must possess specific experience in administration and/or support of computer operating systems and/or network operating systems.
• Must be able to communicate effectively verbally and in writing.
• Must have and maintain an appropriate DoDI 8570.01-M certification for the appointed duty level
• Solid understanding of TCP/IP networking (subnetting, routing, switching, DNS/DHCP, common protocols).
• Hands-on experience managing multiple Palo Alto firewalls - security rules, policies, and zones.
• Experience configuring and troubleshooting Cisco Catalyst 3850/9300 switches.
• Experience with Cisco 4311 (ISR) routers.
• Ability to apply STIGs to network devices and maintain compliance baselines.
• Hyper-V networking: virtual switches, VLAN tagging, and virtual network adapters.
• Experience upgrading Palo/Cisco devices
• Work with other teams to assist and troubleshoot network related issues.
• Familiarity with networking packet capture tools
• Familiarity with standard TCP/UDP ports
• Creating and maintaining network diagrams and documentation.

Responsibilities

• Manage, configure, and maintain network infrastructure in compliance with DoD cybersecurity requirements and SCIF operating standards.
• Configure, administer, and troubleshoot routers, switches, firewalls, VPNs, and other network infrastructure devices.
• Monitor network availability, performance, capacity, and security to ensure reliable and continuous operations.
• Collaborate with the Cybersecurity Team to implement DISA STIG requirements, remediate vulnerabilities, and maintain network security compliance.
• Configure and maintain network services and protocols including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, and access control lists (ACLs).
• Diagnose and resolve network connectivity, latency, routing, switching, and performance issues across classified and unclassified environments.
• Administer network authentication and access controls, including Active Directory integration, RADIUS, 802.1X, PKI, and role-based access.
• Configure and maintain firewalls, security policies, network segmentation, and boundary protection controls in accordance with DoD security requirements.
• Support network vulnerability assessments, ACAS scans, patching, configuration management, and remediation activities.
• Maintain network device configurations, firmware, software updates, backups, and recovery procedures.
• Support implementation and maintenance of secure remote-access and site-to-site VPN solutions.
• Perform network traffic and packet analysis using tools such as Wireshark to identify and troubleshoot network and application communication issues.
• Support network infrastructure modernization, lifecycle replacement, and implementation of new network technologies.
• Develop and maintain network diagrams, configuration baselines, standard operating procedures (SOPs), troubleshooting guides, and other technical documentation.
• Support RMF, ATO, inspection, audit, and continuous-monitoring activities by providing required network configuration and security evidence.
• Coordinate with system administrators, cybersecurity personnel, DevSecOps engineers, and external network providers to resolve infrastructure and connectivity issues.
• Respond to network outages and incidents, perform root-cause analysis, and implement corrective actions to minimize operational impact.

Skills

Active DoD Secret clearance

Upgrade to TS/SCI

DoD cyber/SCIF experience

TCP/IP networking

Palo Alto firewalls

Cisco switches/routers (Catalyst 3850/

Cisco 4311 routers

STIGs compliance

Active Directory/RADIUS/802.1X

Networking troubleshooting

Network monitoring tools (Wireshark)

Remote access VPNs

Tools

Palo Alto firewalls

Cisco Catalyst switches

Cisco ISR routers

Wireshark

Job description

Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Colorado Springs, CO; Crestview, FL; Orlando, FL and Tupelo, MS.

Mission

Quantum is seeking an experienced Network Administrator to join our team in a Sensitive Compartmented Information Facility (SCIF) environment. This role involves managing and maintaining virtual and physical IT infrastructure while ensuring compliance with stringent DoD cybersecurity policies and standards.

Responsibilities

• Manage, configure, and maintain network infrastructure in compliance with DoD cybersecurity requirements and SCIF operating standards.
• Configure, administer, and troubleshoot routers, switches, firewalls, VPNs, and other network infrastructure devices.
• Monitor network availability, performance, capacity, and security to ensure reliable and continuous operations.
• Collaborate with the Cybersecurity Team to implement DISA STIG requirements, remediate vulnerabilities, and maintain network security compliance.
• Configure and maintain network services and protocols including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, and access control lists (ACLs).
• Diagnose and resolve network connectivity, latency, routing, switching, and performance issues across classified and unclassified environments.
• Administer network authentication and access controls, including Active Directory integration, RADIUS, 802.1X, PKI, and role-based access.
• Configure and maintain firewalls, security policies, network segmentation, and boundary protection controls in accordance with DoD security requirements.
• Support network vulnerability assessments, ACAS scans, patching, configuration management, and remediation activities.
• Maintain network device configurations, firmware, software updates, backups, and recovery procedures.
• Support implementation and maintenance of secure remote-access and site-to-site VPN solutions.
• Perform network traffic and packet analysis using tools such as Wireshark to identify and troubleshoot network and application communication issues.
• Support network infrastructure modernization, lifecycle replacement, and implementation of new network technologies.
• Develop and maintain network diagrams, configuration baselines, standard operating procedures (SOPs), troubleshooting guides, and other technical documentation.
• Support RMF, ATO, inspection, audit, and continuous-monitoring activities by providing required network configuration and security evidence.
• Coordinate with system administrators, cybersecurity personnel, DevSecOps engineers, and external network providers to resolve infrastructure and connectivity issues.
• Respond to network outages and incidents, perform root-cause analysis, and implement corrective actions to minimize operational impact.

Required Skills and Qualifications

• Must possess active DoD Secret clearance with the ability to upgrade to TS/SCI
• Must have experience in installing, testing, and supporting information systems and/or networks.
• Must possess specific experience in administration and/or support of computer operating systems and/or network operating systems.
• Must be able to communicate effectively verbally and in writing.
• Must have and maintain an appropriate DoDI 8570.01-M (Information Assurance Workforce Improvement Program) certification for the appointed duty level
• Solid understanding of TCP/IP networking (subnetting, routing, switching, DNS/DHCP, common protocols).
• Hands-on experience managing multiple Palo Alto firewalls - security rules, policies, and zones.
• Experience configuring and troubleshooting Cisco Catalyst 3850/9300 switches.
• Experience with Cisco 4311 (ISR) routers.
• Ability to apply STIGs to network devices and maintain compliance baselines.
• Hyper-V networking: virtual switches, VLAN tagging, and virtual network adapters.
• Experience upgrading Palo/Cisco devices
• Work with other teams to assist and troubleshoot network related issues.
• Familiarity with networking packet capture tools
• Familiarity with standard TCP/UDP ports
• Creating and maintaining network diagrams and documentation.

Desired Skills and Qualifications

• Understanding of - Analytics and providing findings in presentation.
• AWS networking: VPCs, subnets, route tables, security groups, NACLs, Transit Gateway, and VPN.
• Terraform / Infrastructure as Code
• Familiarity with DoD/government compliance processes (audits, hardening, remediation, CTOs).
• Experience with DNS manager.
• Familiarity with SolarWinds SEM/Kiwi Syslog
• Experience working with a CSD

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.