Network Engineer - IL4

Job Title: Network Engineer - IL4/NIPRNet (Remote, CAC-Enabled)

Location: Remote (U.S. Based)

Clearance: Security Clearance Preferred, Not Required

Access Requirement: Active CAC Access or ability to obtain.

Employment Type: Full-Time


Overview:

We are seeking a highly skilled Network Engineer with proven experience supporting IL4-classified environments , specifically within NIPRNet and CAC-authenticated infrastructure . The ideal candidate will bring deep knowledge of network architecture , STIG compliance , and DoD enclave operations , and must already have or be eligible for CAC access .

This role is fully remote but will involve collaboration with cleared teams operating inside DoD-restricted environments. You will support mission-critical infrastructure and security posture for one of our key clients, ensuring boundary compliance and secure network operations.

Key Responsibilities:

• Support and maintain secure, IL4-compliant network infrastructure in CAC-enabled, NIPRNet environments
• Implement and verify DoD CAC/PKI authentication integration across services
• Perform STIG hardening and configuration validation for network devices, servers, and endpoints
• Monitor and tune network performance under NIPRNet constraints (e.g., low bandwidth, strict egress controls)
• Ensure isolation from public internet domains - validate secure routing, DNS resolution, and media endpoints
• Troubleshoot secure media transport (SRTP/TLS/WebRTC) within NIPRNet using packet analysis tools
• Document network configurations, access control policies, and boundary defense rules
• Participate in compliance testing and audits (e.g., ACAS scans, DISA checklists, SSP development)
• Collaborate with security, compliance, and infrastructure teams to maintain IL4 authorization posture

Required Qualifications:

• Active CAC access (Common Access Card) - must already possess or be eligible via prime contractor sponsorship
• 5+ years of hands-on experience as a network engineer supporting DoD or federal environments
• Working knowledge of STIGs , DISA SRGs , and secure enclave configurations
• Strong skills in:
• Network segmentation (VLANs, VPNs, ACLs)
• Routing/switching (Cisco, Juniper, Fortinet)
• Firewalls and boundary device configuration
• Familiarity with NIPRNet provisioning , boundary control, and secure media transport protocols

Preferred Qualifications:

• Active Secret or Top Secret clearance (preferred but not required)
• Experience with DISA IL4/IL5 deployments and secure cloud or hybrid architectures
• Knowledge of FedRAMP, CMMC, or NIST RMF frameworks
• Familiarity with HBSS, ACAS, Tanium, or other DoD security tools
• DoD 8570 IAT II compliant (Security+ CE, CCNA Security, etc.)