Network Operations Engineer

ITC Federal, Inc.; Quantico (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

ITC Federal, Inc. seeks a Network Operations Engineer to support FBI CSfC deployments at Quantico, onsite.

The role requires TOP SECRET clearance with SCI eligibility and IAT Level II certification; you will manage network gear, VPNs, firewalls, routing, and monitoring in a secure environment. You'll collaborate with engineers and operators, ensure DISA/NIST compliance, perform config updates, and assist with disaster recovery and incident response.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or IT-related discipline, or equivalent technical experience.
• 3–5+ years of experience in a Network Engineering role.
• Active Federal TOP SECRET Security Clearance with SCI eligibility, and ability to take and pass a CI Polygraph.
• Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, CISSP, or equivalent).
• Networking knowledge: STP, VLANs, trunking, static/dynamic routing (BGP, EIGRP, OSPF), IPsec VPNs, ACLs, SNMP, packet filtering, and packet analysis tools.
• Platform experience with Cisco FirePower (FTD), Cisco ASA Firewall, Cisco IOS-XE Routers, Cisco IOS-XE Switches, and Aruba ArubaOS Mobility Controllers.
• Excellent written and verbal communication and organizational skills.
• Ability to multi-task in a complex and fast-moving environment.
• Strong problem-solving and decision-making skills.

Responsibilities

• Administer network routers, switches, firewalls, and VPN termination appliances (both site-to-site and remote access).
• Plan and perform network systems level updates and disaster recovery operations.
• Perform installation and configuration of network and server systems hardware and software in accordance with DISA STIG, NIST SP 800-53, and other applicable security hardening guidelines and configuration benchmarks.
• Perform testing and documentation to report systems status and support operations.
• Diagnose, troubleshoot, and resolve hardware, software, or other network and system problems, and replace defective components when necessary.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Collaborate with a multi-disciplinary team of software, test, server engineers, and operations staff.

Skills

Network engineering

Cisco IOS-XE

VPN technologies

Firewalling

Troubleshooting

Education

Bachelor's degree in CS/Engineering/IT

Tools

Cisco FTD

Cisco ASA

IOS-XE

Palo Alto PAN-OS

Aruba MC

VMware vSphere

Windows Servers

PKI Infrastructure

Job description

Overview

JOB TITLE: Network Operations Engineer

AGENCY SUPPORTED: FBI— Commercial Solutions for Classified (CSfC) Program, Marine Corps Base (MCB) Quantico

LOCATION: Marine Corps Base (MCB) Quantico, VA, near the FBI Academy (100% Onsite)

POSITION TYPE: Full-time

CLEARANCE REQUIREMENT: Active Federal TOP SECRET clearance with SCI eligibility required prior to start; must be able to take and pass a CI Polygraph.

CERTIFICATION REQUIREMENT: Current IAT Level II qualifying certification (Security+, CySA+, CISSP, or equivalent) required.

ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.

This position will be a technical resource for the daily operations and maintenance of a Commercial Solutions for Classified (CSfC) solution supporting a Federal Client at Marine Corps Base (MCB) Quantico, VA. This is a Tier 2 role that requires a strong operational background supporting network infrastructure hardware, VPN solutions, packet filtering and firewalling techniques, routing and switching, and troubleshooting. Technologies deployed within the solution include platforms such as Cisco FTD & ASA, Cisco IOS-XE Routing & Switching, Palo Alto PAN-OS, Aruba MC, VMware vSphere, Windows Servers, PKI Infrastructure, and other logging, monitoring, and security solutions. This role is customer-facing and embedded within the client's secure location, so a professional approach to troubleshooting, operational security, and resolution of end-user tickets is paramount.

Responsibilities

RESPONSIBILITIES:

• Administer network routers, switches, firewalls, and VPN termination appliances (both site-to-site and remote access).
• Plan and perform network systems level updates and disaster recovery operations.
• Perform installation and configuration of network and server systems hardware and software in accordance with DISA STIG, NIST SP 800-53, and other applicable security hardening guidelines and configuration benchmarks.
• Perform testing and documentation to report systems status and support operations.
• Diagnose, troubleshoot, and resolve hardware, software, or other network and system problems, and replace defective components when necessary.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Collaborate with a multi-disciplinary team of software, test, server engineers, and operations staff.

Qualifications

REQUIRED:

• Bachelor's degree in Computer Science, Engineering, or an IT-related discipline, or equivalent related technical experience.
• 3–5+ years of experience in a Network Engineering role.
• Active Federal TOP SECRET Security Clearance with SCI eligibility, and ability to take and pass a CI Polygraph.
• Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, CISSP, or equivalent).
• Networking knowledge: STP, VLANs, trunking, static/dynamic routing (BGP, EIGRP, OSPF), IPsec VPNs, ACLs, SNMP, packet filtering, and packet analysis tools.
• Platform experience with Cisco FirePower (FTD), Cisco ASA Firewall, Cisco IOS-XE Routers, Cisco IOS-XE Switches, and Aruba ArubaOS Mobility Controllers.
• Excellent written and verbal communication and organizational skills.
• Ability to multi-task in a complex and fast-moving environment.
• Strong problem-solving and decision-making skills.

DESIRED:

• Current, active professional networking/security certifications (Cisco, Aruba, Palo Alto, Microsoft).
• Prior experience or working knowledge of Commercial Solutions for Classified (CSfC) deployments.
• Prior experience with Mobile Device Management (MDM) platforms.
• Prior experience with Android-based End User Devices (EUD).
• Working knowledge or experience with systems and security tools such as Active Directory Certificate Services (AD CS), Nessus, Splunk, Palo Alto PAN-OS NexGen Firewall, VMware vSphere, and Windows Servers.
• Knowledge of automating provisioning and troubleshooting of network devices, server deployments, and processes.
• Ability to work with, help, lead, and mentor junior staff members.

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

This position is 100% onsite at MCB Quantico, VA. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job; reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Individuals may need to sit or stand as needed for long periods of time throughout the day, and candidates must be able to lift 50 pounds.

For a large percentage of the work week, the environment consists of ambient room temperatures, lighting, and traditional office equipment as found in a typical business office environment, along with work in a typical data center environment.

ITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.