Network Engineer

Peraton; Linthicum (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

Peraton in Linthicum, MD is seeking a Network Engineer to join a DoD-focused team responsible for secure, scalable network infrastructure. You will design and maintain LAN/WAN, implement security controls, and support mission-critical systems in a DISA environment.

The role requires DoD experience, active TS clearance with SCI eligibility, CCNA or Security+ certification, and strong skills in routing, switching, and firewall technologies.

Qualifications

• Active administration of COMSEC and secure data transfer devices.
• Experience implementing AFMAN 17-1302-O in DoD environments.
• Troubleshooting circuits and network issues in a DISA environment.
• Experience providing engineering and operation services on DoD supported networks.
• Familiarity with MPLS, VPNs, BGP, Spanning Tree, VLANs, LLDP, VoIP.
• Knowledge of multicast protocols and emerging network technologies.
• Ability to design and manage network access control with Cisco ISE and identity management.
• Implementing security policies and segmentation on Palo Alto firewalls.
• Perform firewall upgrades and ensure firewall availability.
• Conduct security assessments and STIG-based audits.
• Configure systems per STIG requirements for classified/unclassified environments.

Responsibilities

• Design, implement, and maintain a robust LAN/WAN infrastructure with security tools.
• Proactively monitor performance, uptime, and capacity; resolve bottlenecks.
• Lead root cause analysis for complex network issues and provide permanent fixes.
• Document network configurations, diagrams, and security policies.
• Stay updated on new networking technologies and evaluate benefits.
• Collaborate with other IT teams for seamless integration.
• Mentor junior engineers and support on-call rotations for critical incidents.

Skills

COMSEC background

DISA network troubleshooting

DoD networks experience

Routing & switching (MPLS, VPNs, BGP)

Multicast protocols & emerging tech

Cisco ISE administration

Network access policies by roles

Palo Alto firewall management

Firewall upgrades & patching

DISA STIGs assessments & compliance

Security clearance (TS SCI)

CCNA / Security+ certifications

Education

Associates degree + 10+ years experience

Bachelor's degree + 8+ years experience

Master's degree + 6+ years experience

PhD + 3 years experience

Tools

Cisco ISE

Palo Alto firewalls

Job description

Required Experience:

• COMSEC background with experience as the primary COMSEC Responsible Officer
• Maintain and operate cryptographic equipment and secure data transfer devices
• Understand and be able to implement AFMAN 17-1302-O
• Experience troubleshooting circuit issues within a DISA environment. Including requesting new circuits
• Previous experience providing engineering and operation services on DoD supported networks
• Familiarity with routing and switching such as MPLS, VPNs, and protocols such as, but not limited to, BGP, Spanning Tree, VLANs, LLDP, and VoIP
• Familiarity with Multicast protocols and emerging network technologies
• Ability to design, implement, and manage Cisco ISE solutions for network access control and identity management
• Develop and enforce network access policies based on user roles, device types, and security requirements
• Ability implementing security policies, rule sets and network segmentation on Palo Alto firewalls to protect enterprise environments
• Ability to perform firewall upgrades, patching, and troubleshooting to ensure firewall availability and functionality
• Experience performing security assessments and audits of systems and applications against DISA Security Technical Implementation Guides (STIGs)
• Ability to implement and configure systems according to STIG requirements for both classified and unclassified environments

Minimum Required Qualifications:

• Education: Associates degree and 10+ years of experience; OR Bachelor's degree and 8+ years of experience; OR Master's Degree and 6+ years of experience; OR 3 years with PhD. A degree in one of the following fields is highly desired: Information Technology, Computer Science, Software Engineer, Data Science, or Cybersecurity. However, four (4) years of additional relevant experience or specialized training will be considered in lieu of a Bachelor's degree.
• Certifications:
  • Active CCNA Certification (CCNP can be accepted in lieu of CCNA)
  • Active Security+ Certification
• Security Clearance: Active Top Secret clearance with SCI eligibility.

Preferred Qualifications: CCNP Certification.

Peraton is seeking a Network Engineer in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.

• Design, implement, and maintain a robust and scalable network infrastructure encompassing LAN/WAN technologies, routing protocols, firewalls, load balancers, and network security tools.
• Proactively monitor network performance, uptime, and capacity, identifying and resolving performance bottlenecks and ensuring optimal network health.
• Lead troubleshooting efforts for complex network issues, conducting root cause analysis and implementing permanent solutions.
• Develop and maintain comprehensive network documentation, including diagrams, configurations, and policies.
• Stay abreast of emerging network technologies and trends, evaluating and recommending new solutions to enhance network performance, security, and efficiency.
• Collaborate effectively with other IT teams to ensure seamless integration of network infrastructure with other systems and applications.
• Mentor and guide others to include junior network engineers, fostering their professional growth and development.
• Ability to participate in on-call rotation, providing after-hours support for critical network incidents.

This position is fully on-site M-F in the Baltimore-Metropolitan area. The hours are 10am-6pm.