Senior Network Engineer

** Position Summary*
* MAG Aerospace is recruiting for a
** Senior*
* ** Network Engineer
** who will Architect and manage secure, scalable enterprise network infrastructure that connects business operations across cloud and on-premises environments. You'll design robust network solutions that ensure seamless connectivity, security, and performance while supporting digital transformation initiatives and multi-tenant secure environments.

US Citizens Only

Former US Defense Contractor / US Gov / US Military Experience Only

This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested.

We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in:

Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC

** Essential Duties and Responsibilities*
* ** Essential Duties and Responsibilities
** include the following. Other duties may be assigned.

** Primary Responsibilities*
* + Design and implement enterprise network architectures for hybrid cloud environments

+ Work with other IT cross-functional teams for collaboration where network operations could be impacted

+ Configure and manage Microsoft Azure networking services (VNets, Express Route, VPN Gateway, Network Security Groups)

+ Deploy and maintain Fortinet security appliances (Forti Gate firewalls, Forti Analyzer, Forti Manager)

+ Configure and optimize Cisco enterprise networking equipment (switches, routers, wireless controllers)

+ Implement network segmentation and microsegmentation strategies for secure multi-tenant environments

+ Design and deploy software-defined WAN (SD-WAN) solutions

+ Configure quality of service (QoS) for business-critical applications

+ Develop network monitoring and performance optimization strategies

** Secondary Responsibilities*
* + Implement zero-trust network security architectures

+ Design and configure network access control (NAC) solutions

+ Perform network security assessments and vulnerability remediation

+ Implement advanced threat protection and intrusion prevention systems

+ Support compliance requirements (SOX, PCI-DSS, HIPAA, SOC
2)

+ Manage network automation and infrastructure-as-code initiatives

+ Provide escalation support for complex network issues

+ Implement network security controls (encryption, authentication, segmentation)

+ Design and configure firewall rules and intrusion detection

+ Perform network vulnerability assessments

+ Implement zero-trust network architectures

+ Support cybersecurity compliance requirements

** Requirements*
* + 7+ years of progressive experience in enterprise network engineering

+ Advanced Knowledge of routing, switching, and network protocols (BGP, OSPF, EIGRP, STP, VLANs, QoS, etc.)

+ Hands-on experience with Microsoft Azure networking (Virtual Networks, Load Balancers, Application Gateway, Microsoft Entra )

+ Hands-on experience with enterprise firewalls and security appliances (Fortinet, Cisco ASA/FTD, Palo Alto,etc.)

+

Experience with Forti Gate SD-WAN implementation

+

Experience with Cisco Identity Service Engine (ISE)

+ Experience troubleshooting network security protocols (IPSec, SSL/TLS, 802.1X)

** Preferred Qualifications*
* + Bachelor's degree in Computer Science, Information Technology, or related field

+

Experience with Cisco enterprise equipment (Catalyst switches, ISR/ASR routers, Wireless LAN Controllers)

+

Experience with network automation tools (Ansible, Terraform, Python scripting)

+ Understanding of container networking (Kubernetes, Docker)

+

Experience with SD-WAN solutions (Cisco Viptela, Silver Peak, Velo Cloud)

+ Familiarity with network monitoring tools (Forti Manager, PRTG, Nagios)

+

Experience with secure remote access solutions (VPN, ZTNA)

+ CCNA/CCNP, Azure certifications, or Fortinet NSE certifications

** Clearance:*
* + Must be eligible for Secret Security Clearance

+ US Citizenship required

** Special Note*
* The position is contingent upon candidate's ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.

** Benefits and…