Senior CSfC Network Architect for DoD/NSA

Socket.dev; Fort Belvoir (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

ValidaTek seeks a senior Network Engineer (SME) to support a Defense IT modernization program at Fort Belvoir, VA. You will architect CSfC networks, implement secure VPNs, and ensure NSA-compliant configurations under government leadership.

Requirements include 12+ years in DoD/federal environments, TS/SCI clearance, and DoD 8570/8140 baseline certs; hands-on with Cisco/Aruba VPNs and Palo Alto firewalls. This role offers a challenging, mission-critical environment.

Qualifications

• 12+ years of progressive network engineering experience in DoD/DoW or federal environments.
• Active TS/SCI Clearance.
• DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP).
• Active Computing Environment certification (e.g., CCNP, ACCX, PCNSE).
• Experience configuring Cisco (IOS-XE/ASR) and Aruba VPNs (IPsec/SSL).
• Experience with Palo Alto PAN-OS and firewall management.

Responsibilities

• Architect and operate CSfC network & security engineering under NSA guidance.
• Design, deploy, and maintain CSfC architectures (MSC/MA/CWLAN).
• Implement BGP/OSPF and IPsec VPN tunnels across Cisco/Aruba devices.
• Configure Palo Alto NGFW policies and IDS/IPS signatures.
• Manage 802.1X with Cisco ISE and Aruba ClearPass; ensure posture assessment.

Skills

DoD network engineering

TS/SCI Clearance

IAT Level II/III

Cisco IOS-XE/ASR

Palo Alto PAN-OS

CNSA/PKI/OCSP

802.1X policy enforcement

Cisco ISE/Aruba ClearPass

CSfC architecture

Education

Bachelor's degree or higher

Tools

Cisco IOS-XE

Aruba Mobility Controllers

Palo Alto Firewalls

Cisco ISE

Aruba ClearPass

Job description

ValidaTek seeks a senior Network Engineer (SME) to support a Defense IT modernization program at Fort Belvoir, VA. You will architect CSfC networks, implement secure VPNs, and ensure NSA-compliant configurations under government leadership.

Requirements include 12+ years in DoD/federal environments, TS/SCI clearance, and DoD 8570/8140 baseline certs; hands-on with Cisco/Aruba VPNs and Palo Alto firewalls. This role offers a challenging, mission-critical environment.