Network Engineer

Job Description

Job Description

Sigmatech is seeking an enthusiastic, well-qualified Network Engineer responsible for ensuring the stable, secure, and reliable operation of the National Security Space Institute's (NSSI) network infrastructure. The Network Engineer will design, implement, maintain, and manage NSSI network systems to ensure optimal performance, availability, and reliability.

The ideal candidate will have a strong background in network engineering, network security, and troubleshooting, with a demonstrated ability to identify and resolve complex network issues.

Job responsibilities for this position include:

• Design, configure, implement, and maintain network infrastructure, including routers, switches, firewalls, and other network devices.
• Implement and manage network security measures to protect systems against threats, vulnerabilities, and unauthorized access.
• Monitor network performance and troubleshoot connectivity, performance, and availability issues to ensure optimal operation and minimize downtime.
• Collaborate with Information Technology (IT) personnel and organizational stakeholders to design and implement network solutions that meet mission and operational requirements.
• Conduct network capacity planning and recommend hardware, software, and infrastructure upgrades as needed.
• Document network configurations, changes, procedures, and technical solutions to support continuity, troubleshooting, and compliance requirements.
• Provide technical support, guidance, and mentorship to junior network staff and other IT personnel.
• Stay current with industry trends, cybersecurity requirements, and emerging network technologies to recommend improvements and innovative solutions.

Experience and Skills

Tasks:

• Configure and optimize network hubs, routers, switches, and related network devices, including higher-level protocols and tunneling technologies.
• Develop, implement, and maintain network backup and recovery procedures.
• Diagnose and resolve network connectivity issues.
• Install, configure, and maintain network device operating system software, including IOS, firmware, and related updates.
• Install, replace, and upgrade network hubs, routers, switches, and other network infrastructure devices.
• Monitor network capacity, availability, and performance.
• Identify and remediate network vulnerabilities to safeguard information systems from unauthorized access and external threats.
• Test, troubleshoot, and maintain network infrastructure, including hardware and software components.

Skills:

• Skill in analyzing network traffic, capacity, availability, and performance characteristics.
• Skill in implementing and testing network infrastructure contingency and recovery plans.
• Skill in designing and establishing network routing schemes.
• Skill in implementing, maintaining, and improving established network security practices.
• Skill in installing, configuring, maintaining, and troubleshooting LAN and WAN components, including routers, hubs, switches, and related network devices.
• Skill in IP addressing and subnetting.
• Skill in configuring and utilizing network protection components, including hardware firewalls, servers, routers, and related security devices.
• Skill in securing network communications.
• Skill in protecting networks and information systems against malware and other cyber threats.

Knowledge:

• Knowledge of network architecture, topology, protocols, routing, switching, subnetting, bandwidth management, and traffic flow.
• Knowledge of Local Area Networks (LAN), Wide Area Networks (WAN), Wireless Local Area Networks (WLAN), Virtual Private Networks (VPN), Transmission Control Protocol/Internet Protocol (TCP/IP), Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), directory services, and the Open Systems Interconnection (OSI) model.
• Knowledge of network security principles, including defense-in-depth, firewalls, encryption, access controls, malware protection, and vulnerability mitigation.
• Knowledge of cybersecurity principles, threats, vulnerabilities, risk management, and the operational impacts of cybersecurity incidents.
• Knowledge of network monitoring, performance management, availability, capacity planning, troubleshooting, and common network diagnostic tools.
• Knowledge of network infrastructure hardware and technologies, including routers, switches, hubs, bridges, servers, fiber optics, wireless technologies, and telecommunications systems.
• Knowledge of cloud computing service models, including Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS), as well as public, private, and hybrid cloud environments.
• Knowledge of server administration, systems engineering, backup and recovery, and contingency planning concepts.
• Knowledge of applicable cybersecurity laws, regulations, policies, standards, and industry best practices.
• Knowledge of IT service management principles, including Information Technology Infrastructure Library (ITIL).

Compliance Per DoD 8140 Qualification Matrix: Intermediate Proficiency Level

Education: A Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related technical field. For qualification under the DoD 8140 education pathway, the applicable degree must be from an ABET-accredited or Centers of Academic Excellence (CAE)-designated institution. Master's degree preferred.

Experience: Five (5) or more years of experience in network operations, network engineering, or a similar technical role. Experience must include configuring, maintaining, and troubleshooting network hardware and software, including Cisco, Juniper, or comparable technologies such as routers, switches, firewalls, and network monitoring tools. Experience supporting secure, reliable network operations in enterprise or mission-focused environments is preferred.

Personnel Certification: Applicable certifications include Certified Ethical Hacker (CEH), CompTIA Cloud+, GIAC Certified Incident Handler (GCIH), Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), CompTIA Security+, and Systems Security Certified Practitioner (SSCP). Higher-level certifications applicable to the Network Operations Specialist work role, such as Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional Security (CCNP Security), Certified Cloud Security Professional (CCSP), GIAC Certified Enterprise Defender (GCED), GIAC Certified Intrusion Analyst (GCIA), GIAC Cloud Security Automation (GCLD), GIAC Defensible Security Architecture (GDSA), GIAC Foundational Cybersecurity Technologies (GFACT), and CompTIA SecurityX (formerly CASP+), may also satisfy qualification requirements in accordance with current DoD 8140 guidance.

Security Clearance: Secret required. Top secret preferred.

Physical Requirements:

• Ability to lift and carry network equipment (up to 50 lbs.) as needed.
• Ability to work in a data center environment with exposure to various network hardware and systems.

In compliance with Colorado’s Equal Pay for Equal Work Act, the salary range for this role is $105,000 to $140,000; however, Sigmatech considers several factors when extending an offer, including but not limited to, experience, education/training, key skills, location, and often contractual requirements.

EEO employer