IT Systems Engineer

Clearance: MUST HAVE AN ACTIVE SECRET CLEARANCE

Subsidiary: T&H Services 

Job Title: IT Systems Engineer - Secret

Work Location: Joint Base Andrews/JBAB/The Pentagon

Hours: Monday – Friday, 8am- 5pm | On-Call / Operational Standby as needed

Labor Category: Full-Time | Exempt  

Pay Rate: $97,000 - $107,000 per year

Minimum/General Experience:

 3 – 5 years. Functional Responsibilities: Design, implement, and maintain information technology systems. To include designing the basic computing infrastructure to accomplish key tasks, establishing networking rules for cybersecurity, and troubleshooting network errors or other technical issues.

Minimum Education: A bachelor’s degree in computer science, information technology, or related. Education and experience requirements may be substituted 1. A master’s degree (in subjects described above) and 3 years of experience. 2. No degree with 10 years of intensive and progressive experience demonstrating the required proficiency levels related to task.

Position Overview:

• We are seeking an experienced Senior Network Engineer to support mission-critical, enterprise-scale network infrastructure at Joint Base Andrews (JBA). In this role, you will be responsible for the end-to-end administration, deployment, security, and operational reliability of classified and unclassified core network hardware, boundary protections, High-Assurance IP Encryptors (HAIPEs), and data center switches. The ideal candidate brings deep technical expertise in Cisco enterprise and data center platforms, DoD STIG compliance, network telemetry, and collaborative incident resolution with defense agency stakeholders (e.g., 26th NOS, DISA).
• Key Responsibilities Deploy, provision, configure, and maintain high-availability data center routing and switching hardware, including Cisco Catalyst and Nexus Series platforms, as well as high-performance server network interfaces.
• Maintain comprehensive physical and logical infrastructure records, including exact rack elevation diagrams, patch and port maps, cable plant documentation, and physical asset management databases.
• Identify single-points-of-failure (SPOF) proactively across the network topology and implement redundancy and fault-tolerant architectures. 
• Administer enterprise-level centralized network management platforms, utilizing Cisco Catalyst Center (formerly DNA Center) and Cisco Identity Services Engine (ISE) for device profiling, automated access control, and 802.1X policy enforcement.
• Manage and configure F5 Application Delivery Controllers (LTM/GTM) to ensure high availability, load balancing, and traffic distribution across core application tiers.
•  Administer RSA Authentication Manager solution a to facilitate Multi-Factor Authentication (MFA) for network devices and appliances.
• Install, configure, key, and maintain Type-1 High-Assurance IP Encryptors (HAIPEs), including TACLANE (KG-175D, KGV-72) and associated cryptographic equipment across classified and unclassified enclaves.
• Harden all network elements and perimeter boundary devices in strict accordance with DISA Security Technical Implementation Guides (STIGs) and DoD cybersecurity directives.
• Partner with cybersecurity and facility teams to ensure physical and logical boundary protection controls meet Defense Information Systems Agency (DISA) audit readiness.
• Monitor network performance, capacity metrics, and environmental health utilizing Cacti and enterprise SNMP-based telemetry tools.
• Deploy, maintain, and troubleshoot multicast routing architectures (e.g., PIM, IGMP snooping) supporting enterprise Internet Protocol Television (IPTV) systems over local area networks.
• Act as the primary technical point of contact (POC) interfacing with enterprise operational entities, including the 26th Network Operations Squadron (26th NOS) and DISA, facilitating rapid troubleshooting and resolution during network outages or degraded conditions.
• Author, coordinate, and shepherd Authorized Service Interruptions (ASIs) through change governance boards, ensuring detailed rollback plans and proactive stakeholder communications.

• Formulate, standardize, and maintain detailed Standard Operating Procedures (SOPs) and runbooks aligned with Air Force instructions, environmental standards, and safety policies.
• Participate in disaster recovery (DR) exercises, execute regular system backups, and validate physical/logical restoration procedures.
• Participate in a recurring Tier-3 operational standby / on-call rotation to address emergent off-hours operational degradations.
• Required Qualifications Clearance: Active DoD Secret security clearance (U.S. Citizenship required).Education & Experience:Bachelor’s degree in Computer Science, Information Technology, Computer/Electrical Engineering, or related technical discipline; OR equivalent military/commercial experience.Minimum of 7+ years of progressive, hands-on network engineering experience in secure, mission-critical enterprise or data center environments.Must meet DoD 8140 IAT Level II or III baseline certification requirements: Cisco Certified Network Associate (CCNA) OR Cisco CCNP Enterprise. CompTIA Security+ CE 
• Optional Technical Proficiencies: Demonstrated hands-on engineering experience configuring and maintaining Cisco Catalyst and Cisco Nexus switches/routers. Proven experience administering Cisco Catalyst Center (DNA Center), Cisco ISE, and F5 BIG-IP (LTM/GTM).Direct hands-on experience loading key material, configuring, and maintaining TACLANE / HAIPE hardware (KG-175D, KGV-72).Working knowledge of DISA STIG implementation and network compliance remediation.
• Practical understanding of multicast routing protocols (PIM-SM/DM, IGMP) and SNMP monitoring tools (e.g., Cacti).
• Preferred Qualifications Practical scripting ability in Python and/or automation using Ansible for network provisioning and configuration drift auditing.
• Familiarity with Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) fabric architectures.In-depth knowledge of IPv6 addressing schemes, dual-stack configurations, and routing protocols.
• Familiarity operating within air-gapped systems and classified defense networks (e.g., SIPRNet).Prior operational exposure supporting Air Force, Pentagon, or Air Force National Capital Region (AFNCR) network footprints (including Joint Base Andrews [JBA] and Joint Base Anacostia-Bolling [JBAB]).

US Pay Range 97000 - 107000 USD