A

AMERICAN SYSTEMS

IT and engineering services for government

Network Engineer Lead - Firewall Infrastructure

Network Engineering & AdministrationConfirmed live in the last 24 hours
Full-timeDallas, TX, USA$155k - $180k /yrIn-person

About the Job

Requirements

  • U.S. citizenship is required.
  • An active Top Secret clearance is required, with eligibility to obtain SCI and SAP access.
  • A bachelor's degree in a related technical field is required, or additional relevant experience may be substituted for a degree.
  • At least 8 years of experience in network engineering, network operations, network infrastructure, or firewall administration is required.
  • An active DoD 8140/8570 IAT Level II certification, such as Security+ CE, CySA+, SSCP, or an equivalent certification, is required.
  • An active Cisco Certified Network Associate (CCNA) certification or a higher-level Cisco networking certification is required.
  • Hands-on experience with enterprise network infrastructure, including routing and switching, Layer 2 and Layer 3 troubleshooting, VLANs, subnetting, IP addressing, network design, ACLs, VPN technologies, network segmentation, and resilient network architectures, is required.
  • Hands-on experience administering and troubleshooting enterprise firewall platforms is required.
  • Experience with one or more firewall technologies, such as Cisco Firepower and Firepower Management Center (FMC), Palo Alto Networks, Fortinet, Check Point, or other commercial or government enterprise firewall platforms, is required.
  • Experience with firewall policy administration, rule management, NAT, VPNs, security zones, logging, monitoring, and troubleshooting is required.
  • Experience supporting AAA, 802.1X, network access control, RMF, STIG, and secure configuration requirements is required.
  • The candidate must be able to work independently, lead technical efforts, and resolve complex network and firewall infrastructure issues.
  • Strong written and verbal communication skills are required.

Responsibilities

  • Lead network engineering, administration, and operational support activities in a highly classified environment.
  • Design, implement, configure, and maintain enterprise network infrastructure, including routers, switches, firewalls, VLANs, ACLs, VPNs, network segmentation, and high-availability network architectures.
  • Administer, monitor, troubleshoot, and maintain enterprise firewall environments.
  • Configure and manage firewall policies, access rules, NAT, VPNs, security zones, logging, and monitoring.
  • Troubleshoot complex Layer 2 and Layer 3 issues involving routing, switching, firewall connectivity, access controls, and enterprise network services.
  • Support AAA, authentication, authorization, accounting, and network access control requirements.
  • Configure and troubleshoot 802.1X, VPN, and NAC solutions.
  • Support network-related RMF, STIG, secure configuration, vulnerability remediation, and compliance activities.
  • Develop and maintain network diagrams, implementation plans, standard operating procedures, configuration documentation, and technical reports.
  • Partner with cybersecurity, systems administration, and mission teams to deliver reliable and resilient network services.
  • Support network outages, root cause analysis, change implementation, remediation efforts, and incident-response activities related to network infrastructure.
  • Monitor network performance and recommend improvements to availability, reliability, performance, and infrastructure resiliency.
  • Provide technical leadership, mentoring, and guidance to network engineering and operations personnel.

Desired Qualifications

  • Cisco Firepower experience is preferred.
  • Cisco ISE experience is preferred, particularly with authentication, authorization, accounting, policy enforcement, and network access control.
  • Experience supporting highly compartmented or special-access classified environments is helpful but not required.
  • Advanced Cisco networking certifications, such as CCNP Enterprise, CCNP Security, or CCIE, are helpful but not required.
  • Experience with Palo Alto Networks, Fortinet, Check Point, or other enterprise firewall technologies is helpful but not required.
  • Experience with Cisco ISE, NAC, 802.1X, or related access control platforms is helpful but not required.
  • Experience supporting network modernization, infrastructure upgrades, technology refreshes, network migrations, or data center transformation efforts is helpful but not required.
  • Experience developing network diagrams, implementation plans, configuration documentation, and standard operating procedures is helpful but not required.
  • Experience with network change management, outage resolution, root cause analysis, and incident response in classified environments is helpful but not required.
  • Familiarity with VMware or other virtualized environments is helpful but not required.

About the Company

AMERICAN SYSTEMS

IT and engineering services for government

AMERICAN SYSTEMS delivers information technology and engineering services to U.S. government clients as an employee-owned government contractor. It focuses on IT and enterprise services, software development, and systems engineering, with offerings such as legacy systems migration, mobile app development, and user experience design. The company operates primarily for federal agencies, including the Intelligence Community, by winning government contracts to support national security initiatives and mission-critical programs. Its employee-owned structure aligns workforce interests with company success, differentiating it from typical contractor firms by giving employees a stake in outcomes and accountability in delivering technical and engineering solutions to national security and IT needs.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Chantilly, VA
Founded
1975

Recently Posted Jobs

Explore more opportunities at AMERICAN SYSTEMS

See more jobs