Senior Network Engineer
Amentum company
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Amentum is seeking a Senior Network Engineer to design, implement, and support advanced network and security architectures within a DoD enclave at a SCIF in Fort Meade. You will lead network engineering activities, troubleshoot complex systems, and coordinate with security engineers to meet stringent DISA STIG requirements.
The role requires a TS clearance with SCI eligibility, a Bachelor’s in IT or equivalent experience, and hands-on experience with IS-IS/OSPF, MP-BGP, MPLS, DMVPN/SD-WAN, and
Qualifications
- CCNP certification and 10 years of network engineering experience with 3 years of design/architecture
- Experience building, troubleshooting and testing IS-IS and/or OSPF networks
- Experience building, troubleshooting and testing MP-BGP underlays and overlays
- Experience building, troubleshooting and testing MPLS networks: RSVP-TE, LDP, and SR-MPLS
- Experience building, troubleshooting and testing routing policy and redistribution
- Experience building, troubleshooting and testing DMVPN and/or SD-WAN
- Experience building, troubleshooting and testing STP variants
- Experience standing up and troubleshooting new circuits with fault isolation to CE equipment/demarc/carrier
- Experience with network security technologies incl. SSH, IPsec, RADIUS, TACACS+, firewall NAT, security policies and end-point security
- MS Office applications such as Excel, Word, Outlook, and SharePoint
- Ability to work independently and as part of a team in a dynamic environment
- Willingness to travel up to 20%
Responsibilities
- Perform as senior-level contributor, able to operate autonomously and troubleshoot with customers or teammates
- Design, build and troubleshoot network and network security architecture
- Analyze and develop hardware requirements and prepare specs for hardware acquisitions
- Provide engineering escalation support for LAN/WAN operations, tooling, and security appliances
- Coordinate with IA Security Engineers to validate designs against security controls and DISA STIGs
- Create, review and update technical documentation for integration projects
- Provide deployment and sustainment documentation templates for network equipment and services
- Identify and diagnose complex performance, security and technical issues
Skills
Education
Tools
Job description
In support of DISA, the Intel and Cyber Division is assembling a team to support a program that provides critical network capabilities to the Department of Defense. We are committed to recruiting and retaining this team for prototype development, test, and demonstration, as well as making this team available longer term for integration, deployment and sustainment as needed.
Candidates interested in joining the team must be critical thinkers, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment that supports a critical and rewarding mission. We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes.
Work Schedule: 8 Hours per day, Monday thru Friday
The duties and responsibilities of the Senior Network Engineer include, but are not limited to, the following:
- Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.
- Design, build and troubleshoot network and network security architecture.
- Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
- Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.
- Coordinate with the Information Assurance Security Engineers to validate all designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.
- Create, review, and update technical documentation in support of integration projects.
- Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
- Identify and diagnose complex performance, security, and technical issues.
Employee will work in a SCIF on a daily basis. Employee may also be required to work in a datacenter environment for specified periods of time.
- Cisco Certified Network Professional (CCNP) certification
- Experience building, troubleshooting and testingIS-IS and/or OSPF networks
- Experience building, troubleshooting and testing MP-BGP underlays and overlays
- Experience building, troubleshooting and testing MPLS networks: RSVP-TE, LDP, and SR-MPLS.
- Experience building, troubleshooting and testing routing policy and redistribution.
- Experience building, troubleshooting and testing DMVPN and/or SD-WAN.
- Experience building, troubleshooting and testing different flavors of STP.
- Experience standing up and troubleshooting new circuits with the ability to fault isolate issues to CE equipment, demarc and/or carrier.
- Experience building, troubleshooting and testing network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
- Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.
- Ability to work both independently and as part of a team in a dynamic environment.
- Ability to travel up to 20%.
- Must have active Top Secret clearance with SCI eligibility
- Bachelor's Degree in an IT related field, or an additional five (5) years of Network Engineering experience.
- 10 Years of network engineering w/ 3 years of network design architecture and implementation
- Cisco Certified Network Professional (CCNP) certification
- DoD 8570.01-M IAT-II or IAM-I baseline certification requirements
- Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.
- Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.
- Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.
- Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.
- Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.
- Extensive experience with Cisco IP telephony products
- Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
- Experience developing IT checklists, SOPs, guides, etc.
- Experience deploying DISA STIGs and conducting Government network assessments.
#javelin
250000
The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.
Our health and welfare benefits are designed to support you and your priorities. Offerings include:
Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.
10/05/2026 - Until Filled
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.
Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language atLabor Laws Posters.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
