Sr. Network Engineer

Astrion; Columbia (MD); On-site; USD 145,000 - 165,000; Full time

Job summary

Astrion is seeking a Senior Network Engineer to design, implement, secure, and maintain mission-critical DoD environments from Columbia, MD onsite. You will work with Cisco routing/switching and Fortinet, enforcing STIGs and RMF controls while supporting CDS/C2C architectures.

The role requires an active Top Secret clearance, 8+ years in DoD/classified settings, and DoD 8140 compliant credentials. Expect high-security operations and collaboration with stakeholders.

Qualifications

• Active Top Secret clearance required; TS/SCI preferred.
• 8+ years in DoD/DoW or classified network environments.
• Deep Cisco routing & switching, Fortinet FortiGate expertise.
• Experience implementing RMF, STIGs, and C2C architectures.
• DoD 8140 compliant certifications and experience with cross-domain systems.

Responsibilities

• Design, implement, and maintain secure DoD networks (Cisco/FortiGate).
• Ensure 802.1x, CDS and C2C architectures and strong RMF compliance.
• Perform vulnerability remediation and continuous monitoring per RMF controls.
• Develop network docs, diagrams, and security artifacts; support ATO processes.

Skills

Active Top Secret clearance

8+ years experience

Cisco routing & switching

Fortinet solutions

RMF knowledge

C2C / Cross Domain

DoD/DoW classified environments

Security certifications (e.g., CISSP)

Education

Bachelor’s degree in Network Engineering, Computer Science, or related field

Tools

Fortinet FortiGate

Python / Ansible

SIEM tooling

NetFlow monitoring

Job description

Overview

Senior Network Engineer

LOCATION: Columbia, MD (Onsite)

JOB STATUS:Full-time

CLEARANCE: Active Top Secret (TS/SCI Preferred)

TRAVEL:As Needed

SALARY RANGE: $145k - $165k

Astrion has an exciting opportunity for a highly experienced Senior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting Department of Defense/Department of War (DoD/DoW) environments. The ideal candidate brings deep expertise in Cisco and Fortinet technologies, extensive experience operating within classified networks, and a proven track record of implementing and maintaining systems in compliance with Risk Management Framework (RMF), DoD STIGandCross Domain / Comply-to-Connect (C2C)requirements.

REQUIRED QUALIFICATIONS / SKILLS

• Active Top Secret security clearance.
  • TS/SCI preferred
• Bachelor’s degree in Network Engineering, Computer Science, or related field (or equivalent experience)
• 8+ years of experience in network engineering within Department of Defense/Department of War (DoD/DoW) or classified environments
• Deep expertise in:
  • Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS)
  • Fortinet solutions (FortiGate, FortiOS, VPNs, security fabric)
• Demonstrated experience implementing and maintainingDISA STIG compliance
• Hands-on experience withC2C / Cross Domain architecturesand security controls
• Strong understanding of:
  • RMF (Risk Management Framework)
  • DISA security requirements and accreditation processes
  • DCSA Accreditation Standards
• Active DoD 8140 (formerly DoD 8570) compliant industry certification (e.g., Security+ CE, CISSP, etc.)
• Active DoD 8140 (formerly DoD 8570) compliant environment certification (e.g., minimum Cisco CCNP)
• Experience with C2C Requirements:
  • Network automation (Python, Ansible)
  • Zero Trust architectures
  • SIEM integration and log analysis
  • NetFlow monitoring

KEY COMPETENCIES

• Advanced network design and troubleshooting
• Security hardening and compliance enforcement
• Strong analytical and problem-solving abilities
• Excellent communication and documentation skills
• Ability to operate in high-security, mission-critical environments

PREFERRED QUALIFICATIONS / SKILLS

• CCIE (Enterprise or Security)
• Fortinet NSE 4-7 certifications
• Project Management Experience
• Experience briefing Executive Leadership
• Prior experience supportingCross Domain Solutions (CDS)programs
• Experience with cloud-based DoD environments (e.g., Azure Government, Azure Secret)

RESPONSIBILITIES

• Design, implement, and maintain secure network architectures usingCisco (routing/switching, ISE) andFortinet (FortiGate)solutions
• Design, implement, and maintain 802.1x compliance platform
• Engineer and supportclassified and unclassified network environments(e.g., MDA CNET, NIPR, SIPR, JWICS as applicable)
• Ensure compliance withDoD Security Technical Implementation Guides (STIGs)and cybersecurity policies
• Implement and maintainCross Domain Solutions (CDS)andComply-to-Connect (C2C)architectures
• Perform network hardening, vulnerability remediation, and continuous monitoring in accordance with RMF controls
• Develop and maintainnetwork documentation, diagrams, SOPs, and security artifacts
• SupportAuthority to Operate (ATO)processes, including STIG checklists, POA&Ms, and risk assessments
• Troubleshoot complex network and security issues across multi-vendor environments
• Collaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operations
• Support audits, inspections, and compliance validation activities

"Enabling Services"