Sr. Network Engineer

OverviewSenior Network Engineer LOCATION: Columbia, MD (Onsite)JOB STATUS: Full-timeCLEARANCE: Active Top Secret (TS/SCI Preferred)TRAVEL: As NeededSALARY RANGE: $145k - $165kAstrion has an exciting opportunity for a highly experienced Senior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting Department of Defense/Department of War (DoD/DoW) environments. The ideal candidate brings deep expertise in Cisco and Fortinet technologies, extensive experience operating within classified networks, and a proven track record of implementing and maintaining systems in compliance with Risk Management Framework (RMF), DoD STIG and Cross Domain / Comply-to-Connect (C2C) requirements. REQUIRED QUALIFICATIONS / SKILLSActive Top Secret security clearance.TS/SCI preferredBachelor’s degree in Network Engineering, Computer Science, or related field (or equivalent experience)8+ years of experience in network engineering within Department of Defense/Department of War (DoD/DoW) or classified environmentsDeep expertise in:Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS)Fortinet solutions (FortiGate, FortiOS, VPNs, security fabric)Demonstrated experience implementing and maintaining DISA STIG complianceHands-on experience with C2C / Cross Domain architectures and security controlsStrong understanding of:RMF (Risk Management Framework)DISA security requirements and accreditation processesDCSA Accreditation StandardsActive DoD 8140 (formerly DoD 8570) compliant industry certification (e.g., Security+ CE, CISSP, etc.) Active DoD 8140 (formerly DoD 8570) compliant environment certification (e.g., minimum Cisco CCNP)Experience with C2C Requirements:Network automation (Python, Ansible)Zero Trust architecturesSIEM integration and log analysisNetFlow monitoringKEY COMPETENCIESAdvanced network design and troubleshootingSecurity hardening and compliance enforcementStrong analytical and problem-solving abilitiesExcellent communication and documentation skillsAbility to operate in high-security, mission-critical environmentsPREFERRED QUALIFICATIONS / SKILLSCCIE (Enterprise or Security)Fortinet NSE 4–7 certificationsProject Management ExperienceExperience briefing Executive LeadershipPrior experience supporting Cross Domain Solutions (CDS) programsExperience with cloud-based DoD environments (e.g., Azure Government, Azure Secret)RESPONSIBILITIESDesign, implement, and maintain secure network architectures using Cisco (routing/switching, ISE) and Fortinet (FortiGate) solutionsDesign, implement, and maintain 802.1x compliance platformEngineer and support classified and unclassified network environments (e.g., MDA CNET, NIPR, SIPR, JWICS as applicable)Ensure compliance with DoD Security Technical Implementation Guides (STIGs) and cybersecurity policiesImplement and maintain Cross Domain Solutions (CDS) and Comply-to-Connect (C2C) architecturesPerform network hardening, vulnerability remediation, and continuous monitoring in accordance with RMF controlsDevelop and maintain network documentation, diagrams, SOPs, and security artifactsSupport Authority to Operate (ATO) processes, including STIG checklists, POA&Ms, and risk assessmentsTroubleshoot complex network and security issues across multi-vendor environmentsCollaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operationsSupport audits, inspections, and compliance validation activities