Network Engineer I

Job Description

Job Description

POSITION SUMMARY

The Network Engineer supports Liberty Alliance's Technology Division by configuring, maintaining, securing, and troubleshooting network systems critical to corporate infrastructure and event operations. The role is responsible for the deployment, configuration, monitoring, and security of UniFi and Cisco network infrastructure, including switches, firewalls, wireless access points, VLANs, VPN configurations, Starlink systems, and supporting network services. The Network Engineer contributes to network performance, availability, security, and reliability through proactive monitoring, configuration management, firmware management, vulnerability remediation, documentation, and event support. The position also supports Liberty Alliance's cybersecurity and compliance requirements, including NIST SP 800-171 and CMMC, by implementing, maintaining, documenting, and providing evidence for applicable network security controls. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Configure, deploy, maintain, and troubleshoot UniFi and Cisco networking devices, including gateways/firewalls, switches, wireless access points, and network controllers.

• Configure and maintain VLANs, SSIDs, routing, DHCP, DNS, VPNs, firewall policies, access control lists (ACLs), and network segmentation.

• Maintain appropriate separation between corporate, guest, AV/IoT, management, event, and other network environments based on organizational security requirements.

• Monitor wired and wireless network infrastructure for outages, performance degradation, security events, and anomalous activity.

• Perform troubleshooting for wired and wireless connectivity issues and resolve Level 1 and Level 2 network tickets within assigned scope.

• Support VPN and secure remote-access configurations as required.

• Assist with installation of cabling, racks, patch panels, fiber, PoE infrastructure, and other physical network infrastructure.

• Perform firmware updates, security patches, and vulnerability remediation for network appliances.

• Maintain secure configurations and approved configuration baselines for network infrastructure.

• Review network-device configurations and identify unnecessary or insecure ports, protocols, services, firewall rules, and administrative interfaces.

• Configure, maintain, review, and document firewall rules, network segmentation, VLANs, ACLs, VPNs, and other network security controls in accordance with approved security policies and change-management procedures.

• Maintain network logging and support centralized collection and review of security-relevant logs from firewalls, gateways, switches, wireless infrastructure, and other applicable devices.

• Support vulnerability scanning, remediation, and validation activities involving network infrastructure.

• Maintain accurate network documentation, diagrams, data flows, configuration records, and inventories of network assets.

• Support installation, configuration, and troubleshooting of Starlink and other temporary or event network infrastructure.

• Collaborate with IT, cybersecurity, compliance, engineering, and other Technology Division personnel on site setup, events, special projects, and security requirements.

• Complete all other tasks and duties as needed to help drive Liberty Alliance's Vision, fulfill our Mission, and abide by the organization's values.

• High school diploma/GED required; associate degree, technical training, or equivalent experience in networking, information technology, cybersecurity, or a related field preferred.

• 5+ years of relevant experience in network operations or IT infrastructure.

• Strong knowledge of TCP/IP, DHCP, DNS, routing, switching, VLANs, subnetting, and wireless networking.

• Experience configuring and troubleshooting firewalls, switches, wireless access points, and VPNs.

• Familiarity with Cisco and/or UniFi/Ubiquiti networking equipment.

• Understanding of network security concepts including segmentation, ACLs, firewall policies, least privilege, secure remote access, logging, and network monitoring.

• Working knowledge of NIST SP 800-171 and CMMC requirements as they apply to network infrastructure.

• Ability to implement technical network security controls based on organizational cybersecurity and compliance requirements.

• Ability to maintain accurate network diagrams, configuration documentation, inventories, change records, and other technical evidence.

• Strong troubleshooting, analytical, written, and verbal communication skills.

• Ability to work with cybersecurity and compliance personnel to remediate findings and maintain secure, compliant configurations.

• Ability to follow directions, document work, and adapt in a fast-paced environment.

• Hands-on experience with UniFi gateways/controllers, VLANs, SSIDs, firewall policies, VPNs, PoE switches, and wireless access points.

• Experience supporting a CMMC, NIST SP 800-171, DoD, Defense Industrial Base (DIB), or other regulated environment.

• Experience implementing network segmentation for CUI or other sensitive environments.

• Experience supporting SSP documentation, POA&M remediation, cybersecurity assessments, or audit evidence collection.

• Experience hardening network devices using approved configuration or security baselines.

• Experience reviewing firewall rules, ACLs, network services, and administrative access.

• Familiarity with secure wireless network design and enterprise authentication.

• Experience with Starlink systems, temporary/field networking, and event network deployments.

• Familiarity with Jira or similar ticketing and change-management systems.

• Industry certifications such as CompTIA Security+, CompTIA Network+, Cisco CCT/CCNA, or Ubiquiti certifications.

Work is performed in office, and field environments, with a mix of indoor and outdoor exposure. Must be able to walk, stand, and sit for extended periods, and occasionally climb or work in crawlspaces, ceilings, or racks. Requires the ability to lift up to 50 pounds and safely handle networking equipment and cabling. Work may involve moderate noise levels and occasional heat exposure.

Please submit your resume and cover letter detailing your qualifications and experience. Only qualified candidates will be contacted for an interview.

Liberty Alliance is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status in accordance with applicable federal, state, and local laws. Liberty Alliance is committed to providing a work environment free from discrimination and harassment and where employees are treated with respect and dignity.