Engineer Network 3 with Security Clearance

Engineer Network 3 to support our Engineering & Sciences San Antonio department. As a member of the San Antonio department you’ll get to help architect and build a launch execution network, building and sustaining high availability launch and missile test networks that span classified and unclassified enclaves. As a network strong engineer with meaningful cyber depth, you will lead network design, implementation, and performance tuning while partnering with cyber teams to embed RMF aligned protections and secure baselines into the infrastructure.

The qualified applicant will become part of Northrop Grumman’s Mission Systems support team in San Antonio, TX.
Responsibilities
Designs and plans network communications systems. Provides specifications and detailed schematics for network architecture. Provides specific detailed information for hardware and software selection, implementation techniques and tools for the most efficient solution to meet business needs, including present and future capacity requirements. Conducts testing of network design. Maintains technical expertise in all areas of network and computer hardware and software interconnection and interfacing, such as routers, multiplexers, firewalls, hubs, bridges, gateways, etc.

Evaluates and reports on new communications technologies to enhance capabilities of the network.
This role is on site full time in San Antonio, TX and requires an active TS and SCI eligibility.

• Serve as a network engineer on a multi disciplinary team, designing and sustaining complex, multi node launch and test networks spanning classified and unclassified enclaves.

• Work with customer ISSMs/ISSOs and cyber engineering teams to develop and implement network changes in environments operating under, or seeking, an ATO/IATT, ensuring network designs align with RMF/ATO requirements.

• Design, plan, configure, and maintain enterprise scale network communications systems, delivering and maintaining detailed schematics and specifications for routers, switches, firewalls, multiplexers, bridges, gateways, and related hardware/software.

• Lead end to end testing of network designs, validate configurations, and monitor hardware and link performance to ensure proper settings, reliability, availability, and compliance with security policies and control objectives.

• Develop and execute implementation plans for network enhancements, upgrades, and migrations, coordinating with stakeholders to minimize service disruption and thoroughly documenting all changes and rollback plans.

• Engineer and operate core network services (e.g., DNS, DHCP, NTP, AAA) and segmented architectures that enforce well defined trust boundaries and enable controlled information sharing between multiple enclaves.

• Support the architecture and design of baked in cybersecurity protections by implementing and tuning network level security controls (e.g., firewalls, VPNs, ACLs, IDS/IPS, NAC) in close coordination with cyber/security teams.

• Participate in network operations activities (fault/performance monitoring, incident response support, change management), using NMS/monitoring tools and log/SIEM platforms as part of an integrated NOC/SOC construct.

• Perform physical layer installation tasks (e.g., fiber, patch panels, encryption devices) and ensure accurate as built documentation and configuration baselines are maintained.

• Produce periodic status reports, engineering change documentation, and network design artifacts; communicate technical options, trade offs, risks, and recommendations to internal and external stakeholders.

Basic Qualifications:

• Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline from an accredited institution and 8 years of related professional/military experience in engineering; or a Master’s degree in a STEM discipline and 6 years of related experience; or a Ph.D. in a STEM discipline and 4 years of related experience.

• US Citizenship with a current DoD Top Secret security clearance and SCI eligibility/access that has been active within the last 24 months.

• DoD 8570 IAT Level II certification (e.g., Security+ CE) or equivalent prior to start.

•…