VPN Network Engineer

Amatriot Group, LLC; Norfolk, Pearl City (VA, HI); Remote; USD 145,000 - 165,000; Full time

Job summary

Amatriot Group, LLC is seeking a seasoned VPN Network Engineer to design, implement, and maintain secure enterprise VPN, firewall, and DMZ solutions. The role focuses on Juniper firewalls, Cisco network appliances, and NMCI-related infrastructure, ensuring robust protection and high availability for critical government networks.

The ideal candidate holds a BS degree, DoD Secret clearance, and an active IAT Level III certification, with 8–12 years of related experience.

Qualifications

• Requires a B.S. degree and 8–12 years of related experience.
• U.S. Citizen with active DoD Secret clearance.
• Active DoD 8570.01 IAT Level III certification required (e.g., CCNP Security, CISSP, or CASP+).
• Active Associate level Network Vendor Certification (Cisco/Juniper/Palo/F5).
• Ability to work off-hours and be on-call as needed.
• Network SME for VPN, DMZ, and firewall operations.

Responsibilities

• Support US Navy operations with VPN, DMZ, and firewall SME work for NMCI.
• Define and improve network security appliances, SOPs, and best practices.
• Plan upgrades/maintenance with NMCI stakeholders and NOC teams.
• Provide Tier III escalation and incident management support.
• Participate in root-cause analysis and problem management.

Skills

VPN

Network Security

DMZ

Incident Management

DoD Compliance

On-call Support

Education

B.S. Degree

DoD 8570.01 IAT Level III Certification

Associate Network Vendor Certification (Cisco/Juniper/Palo/F5)

Tools

Cisco

Juniper

Palo Alto

F5 Networks

Job description

Career Opportunities with Amatriot Group, LLC

A great place to work.

Share with friends or Subscribe!

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: VPN Network Engineer

Clearance: Secret Clearance

Location: Norfolk (NRFK) or Pearl Harbor (PRLH)

Job Type: Full-Time (M-F 8-5 on call on weekends as needed)

Target Salary Range*: $145,000 - $165,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

We are seeking a skilled Firewall & VPN Network Engineer proficient in network engineering appliances and technologies (i.e. Firewalls, DMZ, VPN) to join our Transport Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust & mature global network security solutions.

Your expertise in configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure Firewall/VPN solutions, and administering Cisco network appliances will be crucial. You will collaborate closely with cross-functional engineering and project management teams to safeguard our network infrastructure against threats and vulnerabilities ensuring the highest levels of operational integrity. You will be a member of a technical team, managing customer relationships and overseeing key resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), and ITSM and DevSecOps initiatives.

Primary Responsibilities

• Support Current Operations for the United States Navy by providing VPN, DMZ, and Firewall Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world. A qualified candidate for this position would be responsible for network modification, operation, integration, maintenance, security, and implementation of services for the as-fielded NMCI network.
• Collaborates with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve:
  • Network Security Appliances (i.e. DMZ, VPN, Firewalls)
  • Test and Validate Automation and best practice insertion opportunities.
  • Leads development of Network SOPs/TTPs
  • Continuous Service Improvements (CSI)
  • System performance tuning and enhancements
  • Create and maintain Engineering Implementation Plans (EIP)
• Plans and executes network upgrades and maintenance activities with the NMCI Operations Manager, NOC Lead, Release Management team and other key stakeholders.
• Tier III escalation support and vendor engagement supporting Incident Management activities.
• Active participation in Root Cause Analysis for Problem Management activities.

Qualifications

• Requires B.S. Degree and 8-12 years of prior relevant experience. Work experience may be substituted for degree at Hiring Manager’s discretion.
• U.S. Citizen with an active DoD Secret security clearance.
• Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+.
• Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks.
• Ability to work or be called in to work during off-hours to meet customer mission support requirements.
• Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team.
• Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff.
• Perform highly technical maintenance and configuration to firewalls, VPNs, and DMZ appliances.
• Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e. BGP, OSPF, IS-IS), switching protocols (i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP) Multicast protocols and emerging network technologies.
• Strong understanding and in-depth knowledge of IP network/subnet addressing.
• Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements.