Senior Network Engineer

** Position Summary*
* At MAG, we provide and enable real-time situational awareness to help our customers make the world smaller and safer. We are laser focused on serving our customers by providing technical expertise, operational excellence, and flawless execution. Our success is due entirely to the high caliber of employees we recruit, hire, and retain. At MAG, we look for individuals who thrive in a high-performance environment where challenges are the norm and success is expected.

The Senior Network Engineer provides network architecture, hardening, accreditation support, and enterprise and site network engineering across MAG Aerospace's U.S. European Command (USEUCOM) command and control portfolio: mobile command platforms, fixed and survivable C2 facilities, communications and terminal programs, and program offices and integration and training sites. The mobile C2 platform network is the current anchor, and the same discipline applies to facility, site, and enterprise networks across the portfolio.

On the platform, the engineer owns the routed and switched network, the multi-path wide area network (WAN) failover architecture, classification-boundary separation, and the Risk Management Framework (RMF) and Security Technical Implementation Guide (STIG) benchmark evidence supporting Government accreditation, with hardening applied as voluntary defense-in-depth. Across the portfolio, the engineer designs and operates program office, laboratory, and site networks.

***** Must Be US Citizen****
* ** Essential Duties and Responsibilities*
* ** ESSENTIAL DUTIES AND RESPONSIBILITIES*
* + Own, maintain, and configuration-control the STIG-hardened network baselines for the platform router and switching (Cisco IR1101 and IE3300 or equivalent) at the architecture and configuration-management level.

+ Own the multi-path WAN automatic failover and failback architecture across cellular, commercial SATCOM, and military SATCOM and MUOS, including tracking-object logic, route precedence, and failover validation.

+ Own routing, switching, virtual local area network (VLAN) segregation, and multi-enclave network separation, and enforce classification-boundary discipline so that the transport network processes encrypted black data only.

+ Own the platform network's RMF and STIG benchmark posture and the artifacts that support Government accreditation.

+ Integrate and configure platform compute infrastructure, including server and operating-system configuration and joining compute resources to the hardened network.

+ Support bring-up and acceptance test of the integrated network baseline, and validate failover, segregation, and hardening on each build.

+ Design, stand up, and administer the program office and integration-laboratory network, including local area network, wireless, internet and WAN connectivity, switching, and firewall.

+ Coordinate with RF engineering on the network and internet-protocol integration of SATCOM terminals and antenna systems.

** Requirements*
* ** REQUIRED / MINIMUM SKILLS AND KNOWLEDGE*
* + Strong Cisco IOS and IOS-XE engineering: routing, switching, VLANs, network address translation, internet-protocol service level agreement and tracking objects, and embedded event manager.

+

Experience with ruggedized platforms such as the Cisco IR1101 and IE3300 or equivalent.

+ Multi-WAN automatic failover design and validation across cellular, SATCOM, and military SATCOM.

+ DISA STIG benchmark hardening and RMF accreditation-support evidence development, Commercial Solutions for Classified (CSfC) architecture concepts, and multi-enclave classification separation.

+ Enterprise network design and administration: local area network, wireless, firewall, and WAN.

** ADDITIONAL PREFERRED SKILLS*
* + DoD 8140 baseline certification (for example, Security+, CCNA, or higher).

+ Experience authoring RMF packages and working in eMASS.

+

Experience with tactical or mobile communications and vehicle-integrated networking.

+ Experience operating, hardening, or accrediting networks in SCIF or secure facility (ICD 705) environments.

+ Prior U.S. military service, or direct experience supporting U.S. military operations.

+ An active or current Top Secret/SCI (TS/SCI) clearance.

+ Experience supporting nuclear command, control, and communications (NC3), strategic communications, or continuity-of-operations programs.

** EDUCATION*
* Bachelor of Science in Electrical Engineering, Computer Engineering, Computer Science, Information Technology, or a related discipline. Equivalent experience will be considered.

** MINIMUM YEARS OF EXPERIENCE*
* Minimum of 7 years of network engineering experience, including DoD network hardening and accreditation.

** CERTIFICATIONS, LICENSES, AND CLEARANCE*
* Must hold, or be able to obtain and maintain, a U.S. Department of Defense Top Secret security clearance with Sensitive Compartmented Information access (TS/SCI). U.S. citizenship is required.

This position involves access to technical data controlled under U.S. export…