Staff Network Engineer

Applied Research Associates (ARA), Inc.

is seeking an experienced Network Engineer to design, operate, secure, and sustain classified and mission-supporting network infrastructure within the Integrated Mission Systems Sector in Raleigh, NC.

The engineer will support Cisco switching and routing, Cisco and Palo Alto firewalls, integration with Splunk and Forescout, vulnerability remediation, configuration management and documentation of the above.

This position requires an active DoD Secret clearance with eligibility for Top Secret and close coordination with system administrators, cybersecurity personnel, program teams, and Government stakeholders.

Staff Network Engineer Primary Responsibilities:


* Build out documentation of current Infrastructure via Server, Cable and PPSM and Port maps under Raleigh Secure IT ownership.

Use to provide guidance to information owners on future expansion and recommendations for improvement.


* Design, configure, maintain, and troubleshoot LAN infrastructure supporting classified and mission environments, including SIPRNet where assigned while applying DISA STIG and NIST 800-53 controls.


* Fully administer platforms such as Cisco Catalyst's Switches, ARS/ISR Router's, Dell Fabric Switches, Palo Alto 450's and Cisco ASA 1000's and integrate with ForeScout/ISE, Splunk and AAA services.


* Fully Administer operating systems such as IOS, IOS-XE, FTD/ASDM, PaloAlto, SmartFabric OS10.


* Implement and support Layer 2 technologies including STP , 802.1Q VLANs, QoS, 802.1X / MAB, DAI and additional port-security.


* Implement and support Layer 3 technologies including static and dynamic routing, BGP, ACLs, VRFs, traffic shaping, and rate limiting as applicable.


* Maintain secure network segmentation, boundary protection, firewall policy, routing controls, DNS and approved external or DoDIN connectivity.


* Integrate network infrastructure with Splunk, Forescout or other SIEM platforms to monitor network availability, performance, capacity, configurations, and security events.


* Apply applicable DISA STIGs, secure configuration baselines, software updates, vulnerability remediation, and hardening requirements to network devices.


* Develop and maintain network diagrams, IP address plans, device inventories, rack elevations, ports/protocols/services records, configuration baselines, standard operating procedures, and recovery documentation.


* Prepare implementation, validation, and rollback plans and execute approved changes through the Configuration Control Board process.


* Support cybersecurity incidents, outages, Government-directed actions, assessment activities, and after-hours maintenance when mission requirements demand it.


* Provide technical evidence and engineering support for RMF, ATO maintenance, continuous monitoring, DCSA reviews, and customer assessments.

Staff Network Engineer Qualifications:


* US Citizen with an active DoD Top Secret clearan...