IT Network Engineer

Description

The company is moving quickly to build and deliver advanced defense systems, and it is assembling a strong team to turn ambitious ideas into working capability.

This is an early-stage role with real ownership. You would work alongside capable colleagues and have a measurable effect on the company's mission and direction, whatever your function.

The team is looking for a network engineer to implement, run, and keep up network infrastructure that supports mission-critical systems. You need solid knowledge of networking protocols and architecture, a working grasp of cybersecurity standards such as DISA STIGs, hardening, and zero trust, and experience in a fast-moving, growing organization. Prior work in a manufacturing campus setting is a good fit for this role. You must be able to work independently and take initiative.

Responsibilities

• Design, deploy, and maintain secure, scalable enterprise networks covering LAN, WAN, VPN, VoIP, and wireless.
• Work with the network team lead, management, cybersecurity, and systems administration staff to build and protect the corporate, OT, guest, and other networks.
• Run hybrid cloud network infrastructure spanning on-premises systems, major cloud providers, and field locations.
• Configure and manage routers, switches, firewalls, and other network devices from major vendors.
• Apply and maintain system hardening aligned with DoD STIGs, NIST frameworks, CMMC, and related standards.
• Investigate complex network faults across varied environments and find their root causes.
• Write and update network documentation, diagrams, and standard operating procedures.
• Take part in audits, accreditation, and certification work.
• Support deployments and field operations, including travel of 5-10% to other company sites as needed.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• 3+ years in network engineering, ideally at fast-moving companies, startups, or in defense or government settings.
• Solid understanding of networking protocols including TCP/IP, BGP, OSPF, EIGRP, and MPLS.
• Hands-on hardware experience with firewalls, switches, wireless access points, and power equipment.
• Experience applying controls set by cybersecurity frameworks such as RMF, STIGs, NIST, and CMMC.
• Strong written and verbal communication skills.
• Strong experience with SD-WAN and software-defined networking (SDN).
• Optional: industry certifications such as CompTIA Security+, CISSP, or CCNA.
• Optional: experience with 802.1x and RADIUS for wired and wireless networks.
• Optional: experience supporting classified networks.
• Optional: experience with automation tools such as Ansible, Terraform, Puppet, or PowerShell DSC.
• Optional: understanding of zero trust architecture and secure enclave designs.
• Optional: an active security clearance.

Conditions

This is an on-site role, and some after-hours or on-call support may be required.

Occasional lifting of IT equipment up to 40 lbs, plus work in data centers.

The company offers a generous benefits package; details are at the bottom of the Careers page.

Duties may change over time, and the job description does not list every task.

This role may require access to classified information or restricted U.S. Government sites, systems, or information, as set by the company or applicable U.S. Government rules. If so, employment may depend on obtaining and keeping the required government clearance or authorization and meeting any citizenship or other eligibility rules. You will be told if and when these apply.

This role requires access to export-controlled information. Employment, or the hiring of a contractor, depends on being able to access that information without additional export licensing from the Bureau of Industry and Security or the Directorate of Defense Trade Controls.