Senior Network Engineer

LCS Defense; Aberdeen (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

LCS Defense is seeking a hands‑on Network Engineer to support secure, classified environments under national security programs. You will design, configure, and troubleshoot high‑assurance LAN/WAN networks, implement CSfC solutions, and build robust IPsec/VPNs across complex networks.

You’ll work with Cisco routers/switches, Palo Alto/SonicWall firewalls, Aruba ClearPass, and VMware ESXi/vSphere, ensuring STIG compliance while maintaining comprehensive documentation.

Qualifications

• Active TS/SCI clearance required.
• 8+ years network engineering experience (DoD or enterprise).
• Strong experience with Cisco devices, firewalls, and VPNs.
• Solid understanding of network security and STIGs.

Responsibilities

• Design, configure, and troubleshoot secure LAN/WAN networks.
• Implement CSfC solutions and secure communications.
• Build and maintain IPsec/VPNs (site-to-site and client).
• Configure Cisco routers/switches and Palo Alto/SonicWall firewalls.
• Support Aruba ClearPass and wireless controllers.
• Operate within VMware ESXi/vSphere environments.
• Maintain STIG compliance and system hardening.
• Use SolarWinds, NetFlow, SEM for monitoring and docs.
• Maintain network diagrams, docs, and configs.

Tools

SolarWinds

NetFlow

SEM

VMware

ESXi

vSphere

ClearPass

Job description

The Opportunity

Join a mission‑focused team supporting secure, classified network environments for national security programs. This role is hands‑on and focused on CSfC implementations, VPN architectures, and enterprise network engineering across complex, high‑assurance environments.

What You’ll Do

• Design, configure, and troubleshoot secure network infrastructures (LAN/WAN)
• Implement and support CSfC solutions and secure communications
• Build and maintain VPNs (IPSec, IKEv2, site‑to‑site, client VPN)
• Configure Cisco routers/switches, Palo Alto & SonicWall firewalls
• Support Aruba wireless (ClearPass, controllers, APs)
• Work within VMware environments (ESXi, vSphere)
• Enforce STIG compliance and system hardening
• Utilize tools like SolarWinds, NetFlow, SEM for monitoring
• Maintain network documentation, diagrams, and configs

What You Bring

• Active TS/SCI
• 8+ years of network engineering experience (DoD or enterprise)
• Strong experience with:
  • Cisco (ASR, ISR, Catalyst, Nexus)
  • Firewalls/VPNs (Palo Alto, Cisco ASA, SonicWall)
  • Routing: BGP, OSPF, EIGRP
  • Hands‑on experience with IPSec VPNs & secure network design
  • Solid understanding of network security & STIGs

Nice to Have

• CSfC experience
• F5 Load Balancers
• PKI / certificates (EJBCA, RHCS)
• TACLANE or encryption devices
• RHEL / Windows Server exposure
• Certs (Preferred):
  • CCNP (Enterprise) or higher
  • Security+ CE
  • CCNA

Why Join

• Direct impact on national security missions
• Work on cutting‑edge secure network systems
• High‑visibility role with strong technical ownership

Apply Today

If you're a hands‑on engineer who thrives in secure, high‑performance environments, we’d love to connect.