IT Systems Engineer - Secret clearance needed

Description

The company has delivered services to federal clients around the world for more than 35 years. Its subsidiaries cover logistics, IT, cybersecurity and facilities operations, and the work exists to create lasting economic opportunity for the Tlingit and Haida Tribes of Alaska.

This is listed as an IT Systems Engineer role with a Secret clearance, though the detailed posting describes it as senior network engineering support for enterprise network infrastructure at Joint Base Andrews.

The work covers classified and unclassified core network hardware, boundary protection, High-Assurance IP Encryptors and data center switches. You would work with defense agency stakeholders, including the 26th Network Operations Squadron and DISA.

Ideal candidates have deep Cisco enterprise and data center skills, knowledge of DoD STIG compliance, and experience with network telemetry.

Responsibilities

• Design and maintain IT systems, including the basic computing infrastructure for key tasks, networking rules for cybersecurity, and fixes for network errors and other technical faults.
• Deploy, provision, configure and maintain high-availability data center routers and switches, such as Cisco Catalyst and Nexus platforms, plus high-performance server network interfaces.
• Keep accurate physical and logical records, including rack elevations, patch and port maps, cable plant documentation and asset databases.
• Find single points of failure across the network and add redundancy and fault-tolerant design.
• Run Cisco Catalyst Center (formerly DNA Center) and Cisco ISE for device profiling, automated access control and 802.1X policy enforcement.
• Configure and manage F5 LTM and GTM application delivery controllers for availability, load balancing and traffic distribution.
• Administer RSA Authentication Manager to provide multi-factor authentication for network devices and appliances.
• Install, configure, key and maintain Type-1 HAIPEs, including TACLANE KG-175D and KGV-72, across classified and unclassified enclaves.
• Harden network elements and perimeter devices to DISA STIGs and DoD cybersecurity directives.
• Work with cybersecurity and facilities teams so boundary controls meet DISA audit readiness.
• Monitor performance, capacity and environmental health using Cacti and SNMP-based telemetry.
• Deploy, maintain and troubleshoot multicast routing (PIM, IGMP snooping) that supports enterprise IPTV over local networks.
• Act as the primary technical contact for the 26th NOS and DISA, speeding up troubleshooting during outages or degraded service.
• Write Authorized Service Interruption requests, guide them through change governance boards, and include rollback plans and stakeholder updates.
• Write and maintain SOPs and runbooks that follow Air Force instructions, environmental standards and safety policies.
• Take part in disaster recovery exercises, run regular backups and verify physical and logical restoration steps.
• Join the recurring Tier-3 operational standby and on-call rotation to handle off-hours degradations.

Requirements

• Hold an active DoD Secret security clearance. U.S. citizenship is required.
• Hold a bachelor's degree in computer science, information technology, computer or electrical engineering, or a related technical field, or equivalent military or commercial experience.
• Have 7+ years of progressive, hands-on network engineering experience in secure, mission-critical enterprise or data center environments.
• Meet DoD 8140 IAT Level II or III baseline requirements: CCNA or CCNP Enterprise, plus CompTIA Security+ CE.
• Optional: hands-on engineering experience configuring and maintaining Cisco Catalyst and Nexus switches and routers.
• Optional: proven experience administering Cisco Catalyst Center (DNA Center), Cisco ISE and F5 BIG-IP LTM and GTM.
• Optional: direct hands-on experience loading key material, configuring and maintaining TACLANE and HAIPE hardware (KG-175D, KGV-72).
• Optional: working knowledge of DISA STIG implementation and network compliance remediation.
• Optional: practical understanding of multicast routing protocols (PIM-SM/DM, IGMP) and SNMP monitoring tools such as Cacti.
• Preferred: practical Python scripting and/or Ansible automation for network provisioning and configuration drift auditing.
• Preferred: familiarity with Cisco SD-WAN and Cisco ACI fabric architectures.
• Preferred: in-depth knowledge of IPv6 addressing, dual-stack configurations and routing protocols.
• Preferred: familiarity operating air-gapped systems and classified defense networks such as SIPRNet.
• Preferred: prior support for Air Force, Pentagon or AFNCR networks, including Joint Base Andrews and Joint Base Anacostia-Bolling.

Conditions

Work Monday to Friday, 8am to 5pm, with on-call or operational standby as needed.

Based at Joint Base Andrews.

General minimum experience is 3 to 5 years.

Education may be substituted: a master's degree in a related subject plus 3 years of experience, or no degree with 10 years of intensive, progressive experience demonstrating the required proficiency.

Pay range is $97,000 to $107,000 USD.

Benefits

• Benefits support health, well-being and financial security.
• Medical, dental and vision coverage.
• TRICARE Supplemental.
• Critical illness insurance.
• Company-paid life and short-term disability insurance.
• Optional long-term disability.
• Paid leave.
• 401(k) retirement plan.
• Identity theft protection.
• Employee discounts.
• Wellness seminars.
• Union-represented positions receive benefits and leave under the applicable collective bargaining agreement.