Job DescriptionACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIREDThe
Network Systems & Zero Trust Engineer assists in all phases of network management-from initial architecture design through active deployment, operational maintenance, and hardware/software upgrades. This role supports the distributed functionality of high-performance software engineering environments by implementing robust communication system requirements, analyzing quantitative network behavior, and resolving complex connectivity issues.
The annual base salary range for this role is $158,000-$187,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.
Required Skills- Comprehensive Network Administration & Engineering: Hands-on experience configuring, maintaining, and troubleshooting enterprise/mission network devices (routers, switches, firewalls) across multi-vendor environments.
- Network Performance & Traffic Analysis: Strong capability analyzing granular network metrics-including connect time, latency, packet size distribution, and throughput-using tools like Wireshark or tcpdump to diagnose bottlenecks and guide procurement decisions.
- Network Modeling & Digital Twin Platforms: Direct practical experience deploying, configuring, and operating Forward Networks (or equivalent network verification/digital-twin platforms) to generate dynamic network maps, audit configurations, and map attack surfaces.
- Zero Trust Architecture (ZTA) Implementation: Solid technical understanding of Zero Trust security principles, specifically "Know Your Network" capabilities such as automated asset discovery, continuous posture monitoring, and network segmentation.
- Software Engineering Environment Support: Proven ability to implement and sustain communication requirements, VLANs, and interconnects supporting distributed development frameworks, build pipelines, and developer test environments.
Education:
Bachelor's Degree in Data Analytics, Intelligence Studies, Computer Science, Finance/Economics, or a related discipline, PLUS
12+ years of specialized data analytics or financial intelligence experience OR
High School Diploma / GED, PLUS
16+ years of hands-on intelligence analysis, financial tracking, and data discovery experience in lieu of a degree.
Desired Skills- Cross-Domain & High-Side Systems Integration: Familiarity with integrating isolated networks (Mission Islands) with enterprise High-Side models, including cross-domain data movement and strict multi-level security standards.
- Network Automation & Scripting: Proficiency writing automation scripts in Python or Bash, or using configuration management frameworks such as Ansible to automate network device configurations and compliance audits.
- Firewall & Access Policy Management: Practical experience defining and auditing Layer 4-7 access control lists (ACLs) and stateful firewall policies (e.g., Palo Alto Networks, Cisco ASA/Firepower).
- Vulnerability Assessment & Remediation: Familiarity correlating network topology maps with vulnerability scanners (e.g., Nessus, ACAS) to remediate network exposure and maintain compliance with security technical implementation guides (STIGs).
- Network Documentation & Architecture Design: Proven experience reviewing and authoring formal system specifications, interface control documents (ICDs), and high-level network topology diagrams using Visio or similar tools.
