Systems Network Engineer II in San Diego

Energy Jobline ZR; San Diego (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

PMAT seeks a Systems Network Engineer II to design, configure, integrate, and sustain secure network infrastructure across on-premises labs, cloud, and distributed computing environments. This mid-level role collaborates with network, cloud, cybersecurity, software, and infrastructure teams to ensure resilient connectivity and secure operations.

You will work across lab environments and cloud platforms, developing topology diagrams, implementing access controls, and supporting IPsec/SSL VPN

Qualifications

• Strong foundational networking experience in network engineering, administration, or related roles.
• Experience configuring, maintaining, and troubleshooting Layer 2/3 networks, including switching, routing, VLANs, subnets, and segmentation.
• Understanding of TCP/IP, DNS, DHCP, routing, ports/protocols, and addressing.
• Experience with firewalls, ACLs, VPNs, traffic filtering, and network security technologies.
• Experience troubleshooting connectivity, performance, latency, routing, and config issues with network monitoring tools.
• Ability to develop and maintain network diagrams, topology docs, and data-flow diagrams.
• Knowledge of cybersecurity principles, hardening, least-privilege access, remediation, and secure config practices.
• Excellent analytical and problem-solving skills with cross-functional collaboration.

Responsibilities

• Configure, maintain, and troubleshoot Layer 2 and Layer 3 network infrastructure across on-premises, lab, test, cloud, and distributed environments.
• Support connectivity by integrating compute nodes, network infrastructure, and cloud/on-premises services.
• Develop and maintain network topology diagrams, data-flow docs, configuration records, and interface information.
• Configure and maintain network security controls: ACLs, firewall policies, traffic filtering, ports/protocols, segmentation for least-privilege access.
• Deploy, monitor, troubleshoot, and maintain secure remote and site-to-site connectivity (IPsec, SSL VPNs, etc.).
• Monitor network health, throughput, latency, packet loss, and troubleshoot L2/L3 issues affecting apps and infra.
• Support provisioning and configuration of cloud networking components (VPCs/VNets, subnets, route tables, private endpoints).
• Assist in security hardening reviews, vulnerability remediation, and alignment with cybersecurity baselines.
• Collaborate with senior network engineers, cloud/platform teams, cybersecurity, software developers, and infra engineers to resolve complex connectivity issues.

Skills

Networking basics

L2/L3 switching & routing

Firewall/VPN configurations

Troubleshooting network issues

Documentation & topology diagrams

Cybersecurity basics

Cloud networking (VPCs, subnets)

Container networking (Kubernetes)

Infrastructure as Code (Terraform/Ansn

Cross-team collaboration

Education

Bachelor’s Degree or Equivalent Experience

Tools

Wireshark

SNMP

NetFlow/sFlow

Terraform

Ansible

Python

Job description

Job DescriptionJob Description

At PMAT, we work on mission critical systems that directly support the warfighter, designing, building, and securing modern digital capabilities across cloud, data, and software environments. Our teams tackle complex, real-world challenges where delivery matters more than theory, and innovation is driven by curiosity, collaboration, and purpose.

In this role, you’ll contribute to mission-focused technology initiatives, working alongside engineers and technical teams to deliver resilient, forward-leaning solutions in support of defense.

About the role:

PMAT is seeking a Systems Network Engineer II to support the design, configuration, integration, and sustainment of secure network infrastructure supporting distributed computing, cloud, and software environments. This mid-level role will work across on-premises lab and test environments, cloud infrastructure, and distributed computing platforms to maintain reliable and secure connectivity. The candidate will collaborate with network engineers, cloud and platform teams, cybersecurity personnel, software developers, and other technical stakeholders to troubleshoot network issues, maintain network documentation, implement access controls, and support emerging capabilities. The ideal candidate possesses strong foundational networking skills, hands-on troubleshooting experience, and an interest in expanding their expertise across cloud networking, containerized environments, network automation, and modern infrastructure technologies.

Responsibilities:

• Configure, maintain, and troubleshoot Layer 2 and Layer 3 network infrastructure supporting on-premises, laboratory, test, cloud, and distributed computing environments.
• Support network connectivity by integrating compute nodes, network infrastructure, and cloud or on-premises backend services.
• Develop and maintain network topology diagrams, data-flow documentation, configuration records, interface information, and other technical artifacts documenting system connectivity and network dependencies.
• Configure and maintain network security controls, including Access Control Lists (ACLs), firewall policies, traffic filtering rules, ports and protocols, and network segmentation to support least-privilege access.
• Deploy, monitor, troubleshoot, and maintain secure remote and site-to-site connectivity using IPsec, SSL/client-based VPNs, and other approved communications technologies.
• Monitor network health, availability, throughput, packet loss, and latency using network monitoring and diagnostic technologies while troubleshooting L2/L3 issues affecting applications and infrastructure.
• Support provisioning and configuration of cloud networking components, including VPCs/VNets, subnets, route tables, peering connections, security controls, and private endpoints used to connect cloud services with enterprise and distributed computing environments.
• Support network security hardening, configuration reviews, vulnerability remediation, port and protocol reviews, and implementation of applicable cybersecurity requirements and technical security baselines.
• Collaborate with senior network engineers, cloud and platform teams, cybersecurity personnel, software developers, and infrastructure engineers to resolve complex connectivity issues and support integration, testing, deployment, and sustainment activities.

About Us:

PMAT is an innovative small business founded with a passion for developing forward-leaning solutions from exceptional people that increase the mission's capability. We focus on designing and building impactful digital solutions that utilize modern cloud, data, and software concepts. Our passion is working on complex and progressive challenges such as edge platform computing, containerizing legacy platforms, distributed data platforms, or heterogeneous data analysis.

We recruit, retain, and foster a team motivated to pursue passions, investigate new ways of doing things, and embody an innovative and entrepreneurial spirit. We believe in being curious about every element of a problem and experiment relentlessly. We foster continuous learning in an environment that encourages positive collaboration and expands our capabilities. We tap into collective intelligence, acknowledging that the most brilliant people may not be in the room. Above all else, we believe that delivering and demonstrating is more potent than a sheet of paper. We are passionate about mission-centric design and delivering effective capabilities to and for the warfighter.

Whether you’re an experienced engineer or just beginning your career, you’ll work alongside experts who are committed to solving mission-critical problems.

Required Skills and Experience:

• Strong foundational experience in network engineering, network administration, systems networking, infrastructure engineering, or related technical roles.
• Experience configuring, maintaining, and troubleshooting Layer 2 and Layer 3 networks, including switching, routing, VLANs, subnets, and network segmentation.
• Understanding of core networking concepts and protocols, including TCP/IP, DNS, DHCP, routing, ports and protocols, and network addressing.
• Experience configuring or supporting firewalls, ACLs, VPNs, traffic filtering, network access controls, or other network security technologies.
• Experience troubleshooting network connectivity, performance, latency, routing, and configuration issues using network monitoring and diagnostic tools.
• Experience developing or maintaining network diagrams, topology documentation, configuration records, data-flow diagrams, or other network engineering documentation.
• Understanding of cybersecurity principles, network hardening, least-privilege access, vulnerability remediation, and secure network configuration practices.
• Strong analytical and problem-solving skills with the ability to troubleshoot technical issues across networks, systems, applications, and infrastructure.
• Strong written and verbal communication skills with the ability to collaborate effectively with network, cloud, cybersecurity, software, infrastructure, and engineering teams.

Skills and Experience:

• Experience supporting distributed computing, edge computing, robotics, unmanned platforms, or other complex technology environments.
• Familiarity with AWS, Azure, GCP, or similar cloud platforms and networking constructs such as VPCs/VNets, subnets, route tables, peering, private endpoints, gateways, and cloud security controls.
• Familiarity with enterprise network monitoring and diagnostic technologies such as SNMP, NetFlow/sFlow, Wireshark, packet analyzers, or similar tools.
• Familiarity with Kubernetes and container networking concepts, including Container Network Interfaces (CNIs), Pod-to-Pod communication, Services, Ingress controllers, and containerized microservice connectivity.
• Familiarity with network or infrastructure automation using Terraform, Ansible, Python, Bash, or similar automation and Infrastructure as Code technologies.
• Familiarity with Zero Trust architectures, network segmentation, -aware networking, or other modern network security approaches.
• Familiarity with CIS Benchmarks, NIST guidance, STIGs, or other security baselines applicable to network infrastructure.
• Experience supporting hybrid environments connecting on-premises infrastructure, cloud services, distributed computing platforms, and geographically distributed systems.
• Experience supporting government, defense, classified, or other mission-critical network environments.
• Demonstrated ability and interest in expanding technical expertise across cloud infrastructure, container networking, automation, and emerging network technologies.

Education and Certification Requirements:

• Bachelor’s Degree or Equivalent Experience

• Current Security+ Certificate

Citizenship and Clearance Requirements:

• U.S. Citizenship required
• No dual citizenship

• TS/SCI Eligible, security clearance required

Location/Address:

• 100% On-site
• San Diego, CA

Travel & Passport:

5%, CONUS and OCONUS

Work Environment:

PMAT offices as needed. In some cases, work in a government facility may be required. Travel may be required for customer engagement, team coordination, and potentially for business development.

PMAT is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as and veteran status, or any other basis covered by applicable law.