Network Operations Engineer

ITC Federal; Quantico (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

ITC Federal seeks a Network Operations Engineer to support a CSfC solution for a Federal client at Quantico, VA. You will manage routers, switches, firewalls, and VPN devices, ensuring secure, reliable network operations on site, with a focus on DISA/NIST security requirements.

The role requires active TS clearance with SCI eligibility and a current IAT Level II certification, along with hands-on experience in Cisco/Aruba/Palo Alto environments.

Qualifications

• Bachelor's degree or equivalent technical experience.
• 3–5+ years of Network Engineering experience.
• Active Top Secret clearance with SCI eligibility and ability to pass CI Polygraph.
• Current IAT Level II cyber security cert (Security+, CySA+, CISSP, or equivalent).
• Knowledge of STP, VLANs, routing (BGP/EIGRP/OSPF), IPsec VPNs, ACLs.
• Experience with Cisco FirePower, ASA, IOS-XE, Aruba Mobility, Palo Alto PAN-OS.
• Excellent written and verbal communication and organizational skills.
• Ability to multi-task in a fast-moving environment.
• Strong problem-solving and decision-making skills.

Responsibilities

• Administer network routers, switches, firewalls, and VPN termination appliances (site-to-site and remote).
• Plan and perform system updates and disaster recovery operations.
• Install and configure network/server hardware and software per DISA STIG and NIST guidelines.
• Test and document system status to support operations.
• Diagnose, troubleshoot, and resolve hardware/software/network issues; replace defective components.
• Monitor network performance and plan future changes.
• Collaborate with software, test, server, and operations teams.

Skills

Network Engineering

Routing & Switching

IPsec VPNs

Security Certifications

Communication

Troubleshooting

Team Collaboration

Education

Bachelor's degree or higher in CS/Engineering/IT

Tools

Cisco FirePower (FTD)

Cisco ASA Firewall

Cisco IOS-XE

Aruba ArubaOS Mobility Controllers

Palo Alto PAN-OS

VMware vSphere

Windows Servers

Job description

Overview

JOB TITLE: Network Operations Engineer

AGENCY SUPPORTED: FBI— Commercial Solutions for Classified (CSfC) Program, Marine Corps Base (MCB) Quantico

LOCATION: Marine Corps Base (MCB) Quantico, VA, near the FBI Academy (100% Onsite)

POSITION TYPE: Full-time

CLEARANCE REQUIREMENT: Active Federal TOP SECRET clearance with SCI eligibility required prior to start; must be able to take and pass a CI Polygraph.

CERTIFICATION REQUIREMENT: Current IAT Level II qualifying certification (Security+, CySA+, CISSP, or equivalent) required.

ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.

This position will be a technical resource for the daily operations and maintenance of a Commercial Solutions for Classified (CSfC) solution supporting a Federal Client at Marine Corps Base (MCB) Quantico, VA. This is a Tier 2 role that requires a strong operational background supporting network infrastructure hardware, VPN solutions, packet filtering and firewalling techniques, routing and switching, and troubleshooting. Technologies deployed within the solution include platforms such as Cisco FTD & ASA, Cisco IOS-XE Routing & Switching, Palo Alto PAN-OS, Aruba MC, VMware vSphere, Windows Servers, PKI Infrastructure, and other logging, monitoring, and security solutions. This role is customer-facing and embedded within the client's secure location, so a professional approach to troubleshooting, operational security, and resolution of end-user tickets is paramount.

Responsibilities

• Administer network routers, switches, firewalls, and VPN termination appliances (both site-to-site and remote access).
• Plan and perform network systems level updates and disaster recovery operations.
• Perform installation and configuration of network and server systems hardware and software in accordance with DISA STIG, NIST SP 800-53, and other applicable security hardening guidelines and configuration benchmarks.
• Perform testing and documentation to report systems status and support operations.
• Diagnose, troubleshoot, and resolve hardware, software, or other network and system problems, and replace defective components when necessary.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Collaborate with a multi-disciplinary team of software, test, server engineers, and operations staff.

Qualifications

REQUIRED

• Bachelor's degree in Computer Science, Engineering, or an IT-related discipline, or equivalent related technical experience.
• 3–5+ years of experience in a Network Engineering role.
• Active Federal TOP SECRET Security Clearance with SCI eligibility, and ability to take and pass a CI Polygraph.
• Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, CISSP, or equivalent).
• Networking knowledge: STP, VLANs, trunking, static/dynamic routing (BGP, EIGRP, OSPF), IPsec VPNs, ACLs, SNMP, packet filtering, and packet analysis tools.
• Platform experience with Cisco FirePower (FTD), Cisco ASA Firewall, Cisco IOS-XE Routers, Cisco IOS-XE Switches, and Aruba ArubaOS Mobility Controllers.
• Excellent written and verbal communication and organizational skills.
• Ability to multi-task in a complex and fast-moving environment.
• Strong problem-solving and decision-making skills.

Desired

• Current, active professional networking/security certifications (Cisco, Aruba, Palo Alto, Microsoft).
• Prior experience or working knowledge of Commercial Solutions for Classified (CSfC) deployments.
• Prior experience with Mobile Device Management (MDM) platforms.
• Prior experience with Android-based End User Devices (EUD).
• Working knowledge or experience with systems and security tools such as Active Directory Certificate Services (AD CS), Nessus, Splunk, Palo Alto PAN-OS NexGen Firewall, VMware vSphere, and Windows Servers.
• Knowledge of automating provisioning and troubleshooting of network devices, server deployments, and processes.
• Ability to work with, help, lead, and mentor junior staff members.

Work Environment And Physical Demands

This position is 100% onsite at MCB Quantico, VA. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job; reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Individuals may need to sit or stand as needed for long periods of time throughout the day, and candidates must be able to lift 50 pounds.

For a large percentage of the work week, the environment consists of ambient room temperatures, lighting, and traditional office equipment as found in a typical business office environment, along with work in a typical data center environment.

ITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.