Active DoD SECRET clearance, with the ability to obtain a TS/SCI clearance
Must be a US citizen
Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience
3+ years of hands-on experience in network engineering or support roles
Experience with enterprise network infrastructure including routers, switches, firewalls, and VPNs
Knowledge of networking protocols like OSPF, BGP, VLANs, and Layer 2/3 switching
Familiarity with network security principles and compliance activities
Responsibilities
Maintain and support network infrastructure including firewalls, routers, switches, and VPNs
Implement network configuration changes as directed by senior engineers
Assist in planning and deploying cloud network infrastructure in AWS
Apply security best practices in all configuration and support activities
Contribute to network documentation and configuration records
Respond to tickets and provide Tier 2/3 support
Support hardware lifecycle activities including equipment refresh and software upgrades
Benefits
All benefits fully funded for the entire family, including Medical/Dental/Vision/Group Life/STD/LTD with no employee premiums
SGSS funded Health Savings Account (HSA) at maximum IRS limits
Retirement Savings Plan (RSP/401k) with a 20% annual company contribution, no employee contribution required
Full Job Description
SGSS, a Parsons company, is seeking a full-time, on-site Network Engineer to support the continued operation and growth of SGSS and NRL network infrastructure primarily located at our customer location in Welcome, MD. A successful candidate will bring hands-on experience maintaining enterprise network environments and a willingness to grow technical skills - including early-stage exposure to cloud networking - under the direction of senior engineers and IT leadership. This candidate will also be required to manage and support network nodes across multiple physical locations, to include our office in Alexandria, VA and another customer site in Washington, DC. This role is focused on on-premises network support, with cloud integration skills considered a valuable plus.
JOB RESPONSIBILITIES
Maintain and support network infrastructure (Cisco, Palo Alto) including firewalls, routers, switches, LANs, WANs, site-to-site VPNs, remote access VPNs, and wireless networks
Implement network configuration changes per approved architecture and design direction from senior engineers and IT leadership
Assist in the planning and deployment of cloud network infrastructure in AWS, including basic VPC configuration, VPN connectivity, and security groups, as the team expands into cloud environments
Apply security best practices in all configuration, change, and support activities; flag and escalate security concerns through appropriate channels
Contribute to the development and maintenance of network documentation, diagrams, SOPs, and configuration records for corporate and customer environments
Support program engineering activities including enterprise configuration management, change control, and training documentation for network capabilities
Respond to tickets (Slack/GitLab) and provide Tier 2/3 support, tracking and resolving issues in a timely manner
Assist in evaluating and implementing network solutions for corporate and customer environments, working collaboratively with senior staff
Support hardware lifecycle activities including equipment refresh, software upgrades, and routine patching
Coordinate with vendors and internal stakeholders to support procurement and delivery of network products and services
REQUIRED SKILLS AND QUALIFICATIONS
Active DoD SECRET clearance, with the ability to obtain a TS/SCI clearance
Must be a US citizen
S. in a relevant field (Computer Science, Engineering, Information Technology) or equivalent combination of education and hands-on experience
3+ years of hands-on experience in network engineering, administration, or support roles
Demonstrated experience maintaining and troubleshooting enterprise network infrastructure, including routers, switches, firewalls, and VPNs in a production environment
Working knowledge of networking protocols and technologies including OSPF, BGP fundamentals, VLANs, and Layer 2/3 switching
Hands-on experience with Cisco and/or Palo Alto networking equipment in an enterprise or data center environment
Solid understanding of network security principles, including firewall rule management, VPN configuration, and access control
Proficient troubleshooting skills across LAN/WAN environments with excellent hardware troubleshooting instincts
Experience with network monitoring tools, analysis software, and ticketing systems
Working familiarity with RMF and CMMC control families and the ability to support network compliance activities, including documentation review, scanning support, and configuration assessment (e.g., ACAS/Nessus, STIG Viewer, SCAP)
PREFERRED SKILLS AND QUALIFICATIONS
Current TS/SCI clearance
Exposure to cloud networking concepts, particularly AWS - including VPC design, VPN gateways, and security groups; AWS GovCloud experience is a plus
CCNA certification; progress toward or completion of CCNP is a plus
Familiarity with tools used in the environment: GitLab, Terraform, VMware, Proxmox
Exposure to automation or scripting concepts (Python, Bash, Ansible) - no deep expertise required
Familiarity with Linux, especially RHEL families
Experience working in a classified IT development or operations program
DoD 8750 certification at IAT Level II (CompTIA Security+, Cloud+, or CASP+), which will be required to attain and maintain within a defined period of joining
SGSS believes in taking care of their employees by offering:
ALL benefits fully funded, for your entire family
this includes Medical/Dental/Vision/Group Life/STD/LTD - no employee premiums
SGSS funded HSA (Health Savings Account) provided
with SGSS funding the maximum amount allowed by the IRS
Retirement Savings Plan (RSP/401k) with a 20% annual company contribution - no employee contribution required
Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information or applicants who are eligible for security clearances.
