Work Location: Doral, FL / Miami Area (In person / on-site)
Program: SCITES 2
Employment Type: Full-Time W2
Clearance Requirements:
- Must have a current/active TS/SCI clearance (Required).
- Must be able to maintain TS/SCI access for the duration of the assignment.
Job description: Arrona Tech is seeking a motivated, mission focused Senior Network Engineer to support the SOUTHCOM Cyber Information Technology Enterprise Services 2 (SCITES 2) contract in Doral, FL, within the Miami area. This is a full time W2, onsite role supporting a secure Department of Defense mission environment. A current/active TS/SCI clearance is required.
The Senior Network Engineer will support enterprise network engineering, secure classified network connectivity, sustainment, modernization, and compliance efforts across mission critical networks. This role is focused on planning, designing, maintaining, securing, documenting, and troubleshooting enterprise network assets supporting classified networks, including SIPR, NIPR, and JWICS environments.
The ideal candidate will have strong experience engineering and supporting routers, switches, firewalls, intrusion detection and prevention systems, Cisco Identity Services Engine (ISE), classified network connectivity, DISA STIG compliance, RMF support, SCCA, cross-domain solutions, and enterprise service connections across secure DoD environments. The candidate should be comfortable working with cybersecurity, operations, NOC, engineering, ISSO, and mission stakeholders to maintain secure, reliable, and mission ready network services.
Experience supporting a DoD Combatant Command or Service Component is strongly preferred. Prior experience supporting SOUTHCOM or SCITES is highly preferred.
Responsibilities include but are not limited to:
- Plan, design, and maintain connectivity for enterprise network assets, ensuring compliant and secure operations on classified networks, including SIPR, NIPR, and JWICS.
- Collaborate with stakeholders to address connectivity requirements and implement required network configurations to support efficient and secure data transmission.
- Ensure network switches and routers are operational, properly configured, compliant with DISA STIG requirements, and maintained through regular updates, monitoring, troubleshooting, and configuration management.
- Configure, maintain, and monitor firewalls, intrusion protection systems, intrusion detection systems, and Cisco Identity Services Engine (ISE) for network access control and authentication.
- Implement and support network security measures for specialized systems, mission networks, and classified operating environments.
- Support planning and implementation of enterprise service connections between networks, systems, and applications across domains.
- Facilitate secure network connections supporting auditing, authentication, secure cloud computing architecture (SCCA), cross-domain solutions, and guards.
- Collaborate with ISSOs, Cybersecurity Services Leads, network operations teams, and engineering stakeholders in support of the Risk Management Framework (RMF) process.
- Provide RMF inputs, network documentation, security control evidence, configuration records, and technical support for cybersecurity compliance activities.
- Mentor, train, and provide technical guidance to NOC staff, junior engineers, and other technical team members as needed.
Required Qualifications:
- Current/active TS/SCI clearance required.
- Bachelor’s degree in a field necessary to assume Network Engineer duties.
- Four years of additional relevant experience may be substituted in lieu of degree.
- Nine or more years of professional experience, including five or more years of relevant Network Engineer experience.
- Deep understanding of networking protocols, including TCP/IP, DNS, DHCP, routing protocols, and network security principles.
- Expertise configuring and managing network devices, including routers, switches, firewalls, and intrusion detection and prevention systems.
- Hands-on experience with Cisco networking technologies, including IOS and NX-OS, and security appliances such as ASA firewalls and Cisco ISE.
- Familiarity with network monitoring and management tools, virtualization and cloud networking concepts, and secure classified network operations.
- Experience securing classified networks, including SIPR, NIPR, and JWICS, and implementing DISA STIGs.
- Experience with cybersecurity frameworks and standards, including NIST Cybersecurity Framework and RMF.
- Knowledge of network access control and authentication mechanisms, and the ability to assess and mitigate network security risks.
- DoD 8570.01-M IAT Level II certification.
- Strong troubleshooting, documentation, communication, coordination, and customer support skills.
- Ability to work onsite in Doral, FL.
Desired Qualifications:
- Master’s degree in Computer Science, Information Technology, or a relevant discipline.
- Experience with cross-domain solutions and guards.
- Knowledge of cloud computing security architectures, including Secure Cloud Computing Architecture (SCCA).
- Experience with scripting and automation tools for network management.
- Familiarity with ITIL framework and service delivery concepts. ITIL Foundation certification is a plus.
- Relevant networking or cybersecurity certifications such as Cisco CCNP, Cisco CCIE, CompTIA Security+, or equivalent.
- Experience working within a DoD Combatant Command, such as SOUTHCOM, NORTHCOM, CENTCOM, CYBERCOM, INDOPACOM, EUCOM, AFRICOM, STRATCOM, TRANSCOM, SOCOM, SPACECOM, or a Service Component.
- Prior SOUTHCOM or SCITES experience.
Physical Requirements:
- Must be able to remain in a stationary position for up to 50% of the time.
- Must be able to deliver clear and effective communication verbally and via email, phone, and virtual communication platforms to interface with co-workers and customers.
- Must be able to occasionally move about inside an office environment to access file cabinets, office machinery, and communicate with co-workers.
Benefits: 401(k), paid time off, and a taxable health/medical stipend. Paid time off may include paid sick leave where required by applicable state or local law. Benefits are subject to eligibility, Company policy, payroll withholding, and applicable law.