Responsibilities:Lead design, implementation, operation, and maintenance of secure mission network infrastructureEnsure reliable connectivity across computers, storage, and application systemsLead network upgrades, maintenance, and configuration management activitiesDevelop and maintain network documentation, including diagrams, baselines, and proceduresConfigure and administer Cisco Catalyst switches (Layer 2/3)Implement VLANs, trunking, STP, LACP, routing protocols, and ACLsTroubleshoot and resolve switching and performance issuesMaintain configuration baselines and backupsConfigure and manage Palo Alto firewalls and secure network segmentationImplement firewall policies, NAT, application filtering, and threat preventionMonitor firewall activity and coordinate with cybersecurity teamsDesign and support architectures; monitor network performance, availability, and securityAnalyze traffic, bandwidth utilization, and system performanceMaintain dashboards, alerts, and reportingDiagnose and resolve network faults, incidents, and outagesImplement network security controls aligned with NIST and RMF requirementsSupport vulnerability remediation, patching, and system hardeningParticipate in security assessments, audits, and compliance reviewsMaintain secure segmentation and access controlsSupport incident response, perform root cause analysis, and implement corrective actionsManage configuration and change control processes for network devicesImplement approved changes and maintain configuration records and inventoriesLead IPT activities, technical reviews, and engineering discussionsProvide mentorship and guidance to junior engineers and staffSupport integration with systems, cybersecurity, and test teamsMinimum Required Qualifications/ExperienceSDN (not SD-WAN), Catalyst Center or equivalent: centralized control, templates, image managementNetwork STIGs and configuration managementNetwork encryptors (HAIPE/Type 1): red/black separation, MTU overhead, KG-250XCertifications: CCNA Preferred Qualifications/Experience:Routing and switching: OSPF, BGP, VRFs, QoSGRE overlays carrying an IGP and PIM over encrypted transport; MTU and MSS handlingMulticast: PIM-SM, IGMP, RP placement; shared multicast domain with a legacy networkSegmentation: VRF/VLAN separation, split classified/unclassified management planes, out-of-band accessBGP EVPN-VXLANFiber transport connectivity experience, including customer-maintained WANs, communications-panel demarcation, and port-level opticsPalo Alto or Fortinet configuration experiencePanorama or FortiManagerCertifications: CCNP preferredPHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job the employee is regularly required to climb, bend, stretch, walk, sit use hands to handle or feel; frequently use fingers to type; talk and hear; occasionally stand, kneel, stoop, crouch, bend, twist or reach out; may require lifting or moving 10 lbs.