Sr. Network Engineer with Security Clearance

Astrion; Columbia (MD); On-site; USD 145,000 - 165,000; Full time

Job summary

Astrion is seeking a Senior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting DoD/DoW environments. The role focuses on Cisco and Fortinet technologies, RMF compliance, and Cross Domain Solutions.

The ideal candidate has extensive experience with classified networks, strong routing/switching and security hardening skills, and a track record of working in high-security environments. Onsite in Columbia, MD preferred.

Qualifications

• Active Top Secret security clearance is required.
• TS/SCI is preferred.
• Bachelor's degree in Network Engineering, Computer Science, or related field (or equivalent experience).
• 8+ years of DoD/DoW or classified environment experience in network engineering.
• Deep expertise in Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS).
• Deep Fortinet experience (FortiGate, FortiOS, VPNs).
• Experience implementing DISA STIG compliance.
• Hands-on experience with Cross Domain (C2C) architectures and security controls.
• Strong RMF knowledge and DoD accreditation processes.
• Experience with network automation (Python, Ansible) and Zero Trust concepts.
• SIEM integration and log analysis; NetFlow monitoring.

Responsibilities

• Design, implement, and maintain secure network architectures using Cisco routing/switching and Fortinet FortiGate.
• Design and maintain an 802.1x compliant platform.
• Engineer and support classified and unclassified networks (e.g., MDA CNET, NIPR, SIPR, JWICS as applicable).
• Ensure compliance with DoD STIGs and cybersecurity policies.
• Implement and sustain CDS and C2C architectures.
• Perform hardening, vulnerability remediation, and continuous monitoring per RMF controls.
• Develop and maintain network documentation, diagrams, SOPs, and security artifacts.
• Support ATO processes, including STIG checklists, POA&Ms, and risk assessments.
• Troubleshoot complex network/security issues across multi-vendor environments.
• Collaborate with cybersecurity, systems engineering, and stakeholders to ensure secure operations.
• Support audits and compliance validation activities.

Skills

Top Secret clearance

TS/SCI preferred

8+ years DoD/DoW experience

Cisco routing & switching

Fortinet solutions

DISA STIG compliance

C2C / Cross Domain architectures

RMF

Network automation

Zero Trust architectures

SIEM integration

NetFlow monitoring

Education

Bachelor's degree in Network Engineering/CS or related field

Tools

Fortinet FortiGate

FortiOS

Cisco IOS

ISE

Job description

Overview Senior Network Engineer LOCATION: Columbia, MD (Onsite) JOB STATUS: Full-time CLEARANCE: Active Top Secret (TS/SCI Preferred) TRAVEL: As Needed SALARY RANGE: $145k - $165k Astrion has an exciting opportunity for a highly experienced Senior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting Department of Defense/Department of War (DoD/DoW) environments. The ideal candidate brings deep expertise in Cisco and Fortinet technologies, extensive experience operating within classified networks, and a proven track record of implementing and maintaining systems in compliance with Risk Management Framework (RMF), DoD STIG and Cross Domain / Comply-to-Connect (C2C) requirements.

REQUIRED QUALIFICATIONS / SKILLS

• Active Top Secret security clearance.
• TS/SCI preferred
• Bachelor's degree in Network Engineering, Computer Science, or related field (or equivalent experience)
• 8+ years of experience in network engineering within Department of Defense/Department of War (DoD/DoW) or classified environments
• Deep expertise in:
• Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS)
• Fortinet solutions (FortiGate, FortiOS, VPNs, security fabric)
• Demonstrated experience implementing and maintaining DISA STIG compliance
• Hands-on experience with C2C / Cross Domain architectures and security controls
• Strong understanding of:
• RMF (Risk Management Framework)
• DISA security requirements and accreditation processes
• DCSA Accreditation Standards
• Active DoD 8140 (formerly DoD 8570) compliant industry certification (e.g., Security+ CE, CISSP, etc.)
• Active DoD 8140 (formerly DoD 8570) compliant environment certification (e.g., minimum Cisco CCNP)
• Experience with C2C Requirements:
• Network automation (Python, Ansible)
• Zero Trust architectures
• SIEM integration and log analysis
• NetFlow monitoring

KEY COMPETENCIES

• Advanced network design and troubleshooting
• Security hardening and compliance enforcement
• Strong analytical and problem-solving abilities
• Excellent communication and documentation skills
• Ability to operate in high-security, mission-critical environments

PREFERRED QUALIFICATIONS / SKILLS

• CCIE (Enterprise or Security)
• Fortinet NSE 4-7 certifications
• Project Management Experience
• Experience briefing Executive Leadership
• Prior experience supporting Cross Domain Solutions (CDS) programs
• Experience with cloud-based DoD environments (e.g., Azure Government, Azure Secret)

RESPONSIBILITIES

• Design, implement, and maintain secure network architectures using Cisco (routing/switching, ISE) and Fortinet (FortiGate) solutions
• Design, implement, and maintain 802.1x compliance platform
• Engineer and support classified and unclassified network environments (e.g., MDA CNET, NIPR, SIPR, JWICS as applicable)
• Ensure compliance with DoD Security Technical Implementation Guides (STIGs) and cybersecurity policies
• Implement and maintain Cross Domain Solutions (CDS) and Comply-to-Connect (C2C) architectures
• Perform network hardening, vulnerability remediation, and continuous monitoring in accordance with RMF controls
• Develop and maintain network documentation, diagrams, SOPs, and security artifacts
• Support Authority to Operate (ATO) processes, including STIG checklists, POA&Ms, and risk assessments
• Troubleshoot complex network and security issues across multi-vendor environments
• Collaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operations
• Support audits, inspections, and compliance validation activities

#CJ "Enabling Services"