Astrion

Integrated defense, security, and space technology

Senior Network Engineer - Enabling Services

Network Engineering & AdministrationConfirmed live in the last 24 hours

Full-timeColumbia, MD, USA$145k - $165k

About the Job

Requirements

An active Top Secret security clearance is required; TS/SCI is preferred.
A bachelor's degree in Network Engineering, Computer Science, or a related field is required, or equivalent experience.
At least 8 years of network engineering experience in Department of Defense/Department of War or classified environments is required.
Deep expertise in Cisco routing and switching, including BGP, OSPF, EIGRP, VLANs, and MPLS, is required.
Deep expertise in Fortinet solutions, including FortiGate, FortiOS, VPNs, and Security Fabric, is required.
Demonstrated experience implementing and maintaining DISA Security Technical Implementation Guide compliance is required.
Hands-on experience with Comply-to-Connect and Cross Domain architectures and security controls is required.
Understanding of the Risk Management Framework, DISA security requirements and accreditation processes, and DCSA Accreditation Standards is required.
An active DoD 8140-compliant industry certification, such as Security+ CE or CISSP, is required.
An active DoD 8140-compliant environment certification, at minimum Cisco CCNP, is required.
Experience with network automation using Python and Ansible, Zero Trust architectures, SIEM integration and log analysis, and NetFlow monitoring is required.
Advanced network design and troubleshooting skills are required.
Security hardening and compliance enforcement skills are required.
Strong analytical and problem-solving abilities are required.
Excellent communication and documentation skills are required.
Ability to operate in high-security, mission-critical environments is required.

Responsibilities

Design, implement, and maintain secure network architectures using Cisco routing and switching, Cisco ISE, and Fortinet FortiGate solutions.
Design, implement, and maintain an 802.1x compliance platform.
Engineer and support classified and unclassified network environments, such as MDA CNET, NIPR, SIPR, and JWICS as applicable.
Ensure compliance with DoD Security Technical Implementation Guides and cybersecurity policies.
Implement and maintain Cross Domain Solutions and Comply-to-Connect architectures.
Perform network hardening, vulnerability remediation, and continuous monitoring in accordance with Risk Management Framework controls.
Develop and maintain network documentation, diagrams, standard operating procedures, and security artifacts.
Support Authority to Operate processes, including Security Technical Implementation Guide checklists, Plans of Action and Milestones, and risk assessments.
Troubleshoot complex network and security issues across multi-vendor environments.
Collaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operations.
Support audits, inspections, and compliance validation activities.

Desired Qualifications

CCIE certification in Enterprise or Security.
Fortinet NSE 4–7 certifications.
Project management experience.
Experience briefing executive leadership.
Prior experience supporting Cross Domain Solutions programs.
Experience with cloud-based DoD environments, such as Azure Government or Azure Secret.

Overview

Senior Network Engineer

LOCATION: Columbia, MD (Onsite)

JOB STATUS: Full-time

CLEARANCE: Active Top Secret (TS/SCI Preferred)

TRAVEL: As Needed

SALARY RANGE: $145k - $165k

Astrion has an exciting opportunity for a highly experienced Senior Network Engineer to design, implement, secure, and maintain mission-critical network infrastructures supporting Department of Defense/Department of War (DoD/DoW) environments. The ideal candidate brings deep expertise in Cisco and Fortinet technologies, extensive experience operating within classified networks, and a proven track record of implementing and maintaining systems in compliance with Risk Management Framework (RMF), DoD STIG and Cross Domain / Comply-to-Connect (C2C) requirements.

REQUIRED QUALIFICATIONS / SKILLS

Active Top Secret security clearance.
- TS/SCI preferred
Bachelor’s degree in Network Engineering, Computer Science, or related field (or equivalent experience)
8+ years of experience in network engineering within Department of Defense/Department of War (DoD/DoW) or classified environments
Deep expertise in:
- Cisco routing & switching (BGP, OSPF, EIGRP, VLANs, MPLS)
- Fortinet solutions (FortiGate, FortiOS, VPNs, security fabric)
Demonstrated experience implementing and maintaining DISA STIG compliance
Hands-on experience with C2C / Cross Domain architectures and security controls
Strong understanding of:
- RMF (Risk Management Framework)
- DISA security requirements and accreditation processes
- DCSA Accreditation Standards
Active DoD 8140 (formerly DoD 8570) compliant industry certification (e.g., Security+ CE, CISSP, etc.)
Active DoD 8140 (formerly DoD 8570) compliant environment certification (e.g., minimum Cisco CCNP)
Experience with C2C Requirements:
- Network automation (Python, Ansible)
- Zero Trust architectures
- SIEM integration and log analysis
- NetFlow monitoring

KEY COMPETENCIES

Advanced network design and troubleshooting
Security hardening and compliance enforcement
Strong analytical and problem-solving abilities
Excellent communication and documentation skills
Ability to operate in high-security, mission-critical environments

PREFERRED QUALIFICATIONS / SKILLS

CCIE (Enterprise or Security)
Fortinet NSE 4–7 certifications
Project Management Experience
Experience briefing Executive Leadership
Prior experience supporting Cross Domain Solutions (CDS) programs
Experience with cloud-based DoD environments (e.g., Azure Government, Azure Secret)

RESPONSIBILITIES

Design, implement, and maintain secure network architectures using Cisco (routing/switching, ISE) and Fortinet (FortiGate) solutions
Design, implement, and maintain 802.1x compliance platform
Engineer and support classified and unclassified network environments (e.g., MDA CNET, NIPR, SIPR, JWICS as applicable)
Ensure compliance with DoD Security Technical Implementation Guides (STIGs) and cybersecurity policies
Implement and maintain Cross Domain Solutions (CDS) and Comply-to-Connect (C2C) architectures
Perform network hardening, vulnerability remediation, and continuous monitoring in accordance with RMF controls
Develop and maintain network documentation, diagrams, SOPs, and security artifacts
Support Authority to Operate (ATO) processes, including STIG checklists, POA&Ms, and risk assessments
Troubleshoot complex network and security issues across multi-vendor environments
Collaborate with cybersecurity, systems engineering, and mission stakeholders to ensure secure, reliable operations
Support audits, inspections, and compliance validation activities

#CJ

"Enabling Services"

#LI-LP1

About the Company

Astrion

Integrated defense, security, and space technology

Astrion provides integrated technology solutions and services for defense, homeland security, intelligence, and space missions. It covers cyber, software, systems engineering, and mission support, delivered through an “always on” approach and strong execution in demanding environments. The company works directly with customers to deliver impactful results and shape the future of national security and space operations. By combining technical expertise with agility, Astrion differentiates itself through relentless pursuit of bold ideas and end-to-end support across the lifecycle of complex missions. Its goal is to help customers meet critical moments with reliable, tailored solutions that advance capabilities in defense, security, and space.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Washington DC, District of Columbia
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Astrion

See more jobs