Network Engineer - Skillbridge

Viasat, Inc.; Lorida (FL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Job summary

Viasat, Inc. is seeking a security-focused professional to join the Government team.

You will contribute to the RMF and ATO lifecycle, hardening equipment against the current DISA STIG, evaluating findings from scans, and keeping system documentation audit-ready. This hands-on role requires tracing findings from the Security team to the affected component, coordinating with the Cyber Security Operations Center, Security Engineering, and system owners, and occasional travel to operational sites.

Qualifications

• 5+ years of experience administering virtualized environments (VMs) and multi-tenant storage systems.
• Familiarity with routing/switching, firewalls, and enterprise security policies (CCNA level).
• Hands-on CLI/management console for Linux/Windows networking gear; ability to pull and modify running configurations.

Responsibilities

• Harden and validate equipment against DISA STIGs and support RMF/ATO lifecycle.
• Trace findings from security scans to remediation through documentation and change control.
• Coordinate with SOC, Security Engineering, and system owners; travel to operational sites as needed.

Skills

VMware VMs

Linux admin

Windows admin

Networking firewalls

DoD clearance

Education

Bachelor's degree in CS/EE/IT

Tools

Cisco IOS

PAN-OS

NetApp ONTAP

vCenter

PowerShell

Job description

For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. This team plays a critical role in sustaining the security posture, compliance evidence, and documentation integrity across multiple networks and systems within Viasat Government.

You will be a key contributor to our Risk Management Framework (RMF) and Authority to Operate (ATO) lifecycle - hardening and validating equipment against the current DISA STIG, evaluating identifiers (CVE, IAVM, STIG IDs, CCIs) that come back from the Security team's scans, and keeping our system documentation accurate and audit-ready.

Beyond executing hardening tasks, you will navigate the environment confidently - moving between physical and virtual systems, STIG checklists, and documentation repositories to trace a finding from the Security team's scan output to the affected component, through the change, and into the record of remediation. You will help uphold the standards that keep our networks accredited and operational.

The successful applicant must be self-motivated, capable of completing structured compliance work with minimum supervision, and comfortable asking the right questions in a working session before acting.

The role will require coordination with a wide range of other project teams both within and external to Viasat, including the Cyber Security Operations Center, Security Engineering, and system owners. The role may require travel to support compliance activities at operational sites.

Performing preventative maintenance of hardware, software, and networks. This is accomplished via routine inspection, backup, physical maintenance, etc. Documenting procedure creation, corrective actions, configurations, diagrams, etc. The documentation consists of trouble tickets and logs, equipment configurations, wiring diagrams, block and level diagrams, logic diagrams, rack elevation drawings, physical interconnection diagrams, backhaul circuit information, System Change Control, Corrective Action Reports.

• Cyber and Information Assuredness. You will work closely with the Cyber Security Operations Center, and the Security Engineering team to identify vulnerabilities, verify network impact, and remediate applicable components. Configuration-Level STIG Hardening. Perform hands-on configuration work on the gear that supports Viasat Government: Cisco IOS/NX-OS routers and switches, Palo Alto PAN-OS firewalls, Red Hat Enterprise Linux (shell, systemd, SELinux, auditd), Windows Server and Windows 11 (Group Policy, local policy, PowerShell), PostgreSQL and SQL Server, PDUs, security/infrastructure appliances, VMware ESXi and vCenter, VDI, and NetApp A400 (ONTAP). Pull the current running configuration, compare it against the applicable DISA STIG, apply the gap-closing changes, and confirm each setting behaves as intended before marking it closed.
• Flag operational risk to senior engineers and IA and help shape the mitigation, rather than applying changes blindly from the benchmark.
• Join working sessions with the team to discuss vulnerability scan results, agree on applicability and ownership for each item, and translate findings into concrete configuration work on the affected platform.
• 5+ years of experience administering virtualized environments (VMs), managing multi-tenant storage systems, integrated network routing/switching, and enterprise firewall policies
• Familiarity with virtualized environments (VMs), storage, routing/switching, and firewall policies (CCNA-level understanding is sufficient)
• Hands-on comfort at the command line and management console for networking gear, Linux, and Windows - able to pull a running configuration, apply a change under direction, and confirm it took effect
• Active DoD Secret Clearance or ability to obtain when administratively feasible
• Ability to travel up to 15%
• Ability to work an on-call rotation.

What will help you on the job

• VMware Certified Professional
• Windows Server AZ-800 / AZ-801
• CCNA, CCNP, or CISSP
• Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology or equivalent experience
• Automation using Python, Ansible, PowerShell, etc.
• Experience configuring, administering, upgrading, and securing a wide variety of equipment and applications

Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered.

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic.

If you would like to request an accommodation on the basis of disability for completing this on-line application.