Network Engineer - Skillbridge

ViaSat Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Viasat is seeking a Security Engineer to sustain RMF/ATO compliance across networks and systems within the government-focused environment. You will harden configurations, validate security controls, and maintain audit-ready documentation in collaboration with the Cyber Security Operations Center and Security Engineering teams.

The role emphasizes precise, defensible work and cross-team coordination, including travel to operational sites and participation in scan reviews and audit discussions.

Qualifications

• 5+ years of experience administering virtualized environments and enterprise firewall policies
• Familiarity with DISA STIGs, POA&M, IAVMs, and RMF compliance framework
• Hands-on command line experience for networking gear, Linux, and Windows
• Experience with DoD security posture and obtaining clearance
• Strong technical writing: checklists, diagrams, audit evidence
• Willingness to travel up to 15% and to participate in on-call rotations
• Bachelor’s degree or equivalent experience in a relevant field

Responsibilities

• Perform preventive maintenance of hardware, software, and networks with team collaboration
• Document procedures, corrective actions, configurations, diagrams, and logs
• Collaborate with SOC and Security Engineering to identify vulnerabilities and remediation actions
• Perform STIG hardening on Cisco, PAN-OS, RHEL, Windows, PostgreSQL/SQL Server, VMware, and NetApp
• Analyze change impacts and communicate operational risks to senior engineers
• Join working sessions to discuss findings and assign ownership for items
• Capture and deliver evidence: findings, settings, commands, and remediation records

Skills

RMF/ATO awareness

DoD STIG knowledge

Vulnerability remediation

Documentation proficiency

Communication skills

Travel readiness

On-call readiness

Education

Bachelor’s degree in CS/EE/IT

Tools

Cisco IOS/NX-OS

Palo Alto PAN-OS

Red Hat Enterprise Linux

Windows Server/Windows 11

PostgreSQL/SQL Server

VMware ESXi/vCenter

NetApp ONTAP

Job description

About us

At Viasat, the work you do helps people stay connected in ways that matter, from everyday moments to critical missions across air, land, sea, and space.

We’re a place for people who are curious, bold, and motivated by meaningful work. Here, you'll have the opportunity to make an impact, explore new possibilities, and grow your career in ways that align with your interests and goals. When you're ready to take on something new, you'll find leaders who support your development and help you turn your ambition into action.

What you'll do

This team plays a critical role in sustaining the security posture, compliance evidence, and documentation integrity across multiple networks and systems within Viasat Government.

You will be a key contributor to our Risk Management Framework (RMF) and Authority to Operate (ATO) lifecycle - hardening and validating equipment against the current DISA STIG, evaluating identifiers (CVE, IAVM, STIG IDs, CCIs) that come back from the Security team's scans, and keeping our system documentation accurate and audit-ready.

This is a high-impact role for someone who takes pride in precise, defensible work and who thrives on collaboration. Beyond executing hardening tasks, you will navigate the environment confidently - moving between physical and virtual systems, STIG checklists, and documentation repositories to trace a finding from the Security team's scan output to the affected component, through the change, and into the record of remediation. You will help uphold the standards that keep our networks accredited and operational.

The successful applicant must be self-motivated, capable of completing structured compliance work with minimum supervision, and comfortable asking the right questions in a working session before acting.

The role will require coordination with a wide range of other project teams both within and external to Viasat, including the Cyber Security Operations Center, Security Engineering, and system owners. The successful candidate must be able to represent the team clearly in working groups, scan review meetings, and audit discussions. The role may require travel to support compliance activities at operational sites.

The day-to-day

• Performing preventative maintenance of hardware, software, and networks. This is accomplished via routine inspection, backup, physical maintenance, etc. Collaboration with the other team members to ensure accuracy and thoroughness of pre, main, and post execution work.
• Documenting procedure creation, corrective actions, configurations, diagrams, etc. The documentation consists of trouble tickets and logs, equipment configurations, wiring diagrams, block and level diagrams, logic diagrams, rack elevation drawings, physical interconnection diagrams, backhaul circuit information, System Change Control, Corrective Action Reports.
• Cyber and Information Assuredness. You will work closely with the Cyber Security Operations Center, and the Security Engineering team to identify vulnerabilities, verify network impact, and remediate applicable components. You will perform STIGs on a quarterly basis along with other RMF/ATO activities on a routine basis.
• Configuration-Level STIG Hardening. Perform hands-on configuration work on the gear that supports Viasat Government: Cisco IOS/NX-OS routers and switches, Palo Alto PAN-OS firewalls, Red Hat Enterprise Linux (shell, systemd, SELinux, auditd), Windows Server and Windows 11 (Group Policy, local policy, PowerShell), PostgreSQL and SQL Server, PDUs, security/infrastructure appliances, VMware ESXi and vCenter, VDI, and NetApp A400 (ONTAP). Pull the current running configuration, compare it against the applicable DISA STIG, apply the gap-closing changes, and confirm each setting behaves as intended before marking it closed.
• Impact Analysis from changes. Before touching a setting, understand what it controls, what it is likely to affect operationally, and what to watch for during and after the change. Flag operational risk to senior engineers and IA and help shape the mitigation, rather than applying changes blindly from the benchmark.
• Collaborate with Team & Stakeholders. Join working sessions with the team to discuss vulnerability scan results, agree on applicability and ownership for each item, and translate findings into concrete configuration work on the affected platform.
• Evidence Capture and Deliverables. Record required information using an approved template. This can include findings addressed, the exact setting changed, the validation performed, the supporting command output or screenshots, and the resulting state for each hardening action - and keep the surrounding artifacts current, including STIG checklists, POA&M entries, change control records, interconnection and rack diagrams, and Corrective Action Reports.

What you’ll need

• 5+ years of experience administering virtualized environments (VMs), managing multi-tenant storage systems, integrated network routing/switching, and enterprise firewall policies
• Familiarity with virtualized environments (VMs), storage, routing/switching, and firewall policies (CCNA-level understanding is sufficient)
• Hands-on comfort at the command line and management console for networking gear, Linux, and Windows - able to pull a running configuration, apply a change under direction, and confirm it took effect
• Working knowledge of DoD security posture, including DISA STIGs, POA&M, IAVMs, and the RMF compliance framework
• Demonstrated attention to detail producing technical documentation - checklists, diagrams, change records, and audit evidence
• Strong collaboration and communication skills, with a willingness to take direction from senior engineers
• Security+ certification or equivalent that meets the DoD Directive 8570 baseline (must be able to obtain within 45 days)
• Active DoD Secret Clearance or ability to obtain when administratively feasible
• Ability to travel up to 15%
• Ability to work an on-call rotation.

What will help you on the job

• RedHat Certified Systems Administrator (RHCSA)
• VMware Certified Professional
• Windows Server AZ-800 / AZ-801
• CCNA, CCNP, or CISSP
• Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology or equivalent experience
• Nessus, Security Center familiarity
• Identity and access management
• Automation using Python, Ansible, PowerShell, etc.
• Identity and access management
• Experience configuring, administering, upgrading, and securing a wide variety of equipment and applications

Salary range

$0.00 - $0.00 / annually. For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $0.00- $0.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat’s comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits.

EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.