Description

At the heart of Defining Possible is our commitment to missions. In rapidly changing global security environments, Northrop Grumman brings informed insights and secure technological solutions to enable strategic objectives. We’re looking for innovators who can help us keep building on our wide portfolio of secure, affordable, integrated, and multi-domain systems and technologies that fuel those missions. By joining in our shared mission, we will support yours by expanding your personal network and developing skills, whether you are new to the field or an industry thought leader. At Northrop Grumman, you will have the resources, support, and team to do some of the best work of your career.

Northrop Grumman’s Corporate Sector's Chief Information & Digital Office (CIDO) is seeking a Principal Network Communications to support its IT Infrastructure & Operations organization's Classified Solutions team. The selected candidate will support the design, integration, security, sustainment, and operational performance of classified network environments spanning Microsoft Azure - Government Secret Cloud and AWS Government Secret Cloud, and the connectivity from company air-gapped classified networks into enterprise and program-specific enclaves.

The selected candidate will work on-site, full-time, in support of classified operations requiring direct interaction with enclave infrastructure, cross-domain connectivity constraints, and mission users in secure facilities at our Redondo Beach, CA; Rolling Meadows, IL; BWI Linthicum, MD; or Melbourne, FL location.

This role serves as a primary technical contributor for complex network solutions that enable secure cloud adoption, hybrid classified connectivity, and mission execution across multiple secured environments.

The responsibilities of this role include, but are not limited to, the following:

• Perform advanced network administration and engineering activities in support of classified government contracts, including design, implementation, hardening, troubleshooting, and sustainment of infrastructure supporting Microsoft Azure - Government Secret Cloud and AWS Government Secret Cloud, and air-gapped classified enclaves.

• Administer and optimize LAN, WAN, VPN, boundary defense, routing, switching, and encryption technologies supporting secure connectivity between on-premises classified networks and cloud-hosted secret environments.

• Plan, design, configure, implement, and document network solutions for enterprise enclaves and program-specific enclaves, including secure transport, segmentation, and resilient access patterns for Microsoft Azure - Government Secret Cloud and AWS Government Secret Cloud mission workloads.

• Lead configuration, testing, accreditation support, and deployment of routing, switching, firewall, and security appliance solutions in classified environments, ensuring compatibility with cloud connectivity, enclave boundary requirements, and mission availability needs.

• Develop and present technical network design recommendations to management, program stakeholders, and partner teams for complex classified and cloud-connected architectures.

• Conduct capacity planning, performance analysis, and growth forecasting for classified network infrastructure and cloud-connected enclaves, and provide actionable recommendations to program managers and technical leadership.

• Develop, refine, and maintain network standards, implementation patterns, security documentation, and operational procedures supporting compliant use of Microsoft Azure - Government Secret Cloud and AWS Government Secret Cloud, and air-gapped classified networks.

• Resolve complex network incidents, service degradations, and security-related events affecting classified and cloud-connected environments, coordinating across cybersecurity, systems administration, cloud, and program teams to restore mission operations.

• Operate under general direction, independently determining approaches to technical solutions, implementation sequencing, and issue resolution for complex network assignments.
• Engage internal and external customers to define technical requirements, translate mission needs into network designs, develop implementation plans, and support delivery of secure classified connectivity capabilities.
• Implement, integrate, and troubleshoot advanced LAN/WAN technologies including segmentation, VLANs, trunking, spanning tree, dynamic routing, secure tunneling, and boundary enforcement controls in classified mission environments.
• Track engineering, incident, and implementation activities through approved workflow and ticketing systems such as ServiceNow and JIRA to ensure traceability, change control, and operational accountability.

• Escalate high-risk technical issues, architectural constraints, and mission-impacting dependencies when program objectives, security posture, or implementation timelines are at risk.

• Lift and move equipment up to 50 pounds in support of device deployment, relocation, and break/fix activities. 

• Provide after-hours support as required for maintenance windows, incident response, and mission-critical cutovers affecting classified and cloud-connected network operations.
• Design and support secure connectivity patterns between enterprise classified infrastructure and cloud-hosted secret environments while preserving air-gap controls, enclave segmentation, and applicable security constraints.
• Collaborate with cybersecurity, systems, cloud, and compliance stakeholders to support network solutions through assessment, authorization, implementation, and sustainment activities.
• Produce and maintain detailed engineering artifacts including diagrams, implementation plans, interface documentation, and troubleshooting guidance for complex classified network solutions.

Note: Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply, only if they are willing to work on-site.

Basic Qualifications:

• Master's Degree with 3 years of relevant experience; OR a Bachelor's Degree with 5 years of relevant  experience; OR an Associate's Degree with 7 years of relevant  experience; OR a High School diploma (or equivalent) with 9 years of relevant experience in network engineering, network administration, or secure infrastructure operations.

• Candidates must have a current U.S. Government Secret security clearance (at a minimum), to include a closed investigation date completed within the last 6 years OR must be enrolled in the U.S. Government Continuous Evaluation (CE) Program to be considered.

• Experience designing and maintaining LAN/WAN based networks, managing routing protocols on large LAN/WAN environments, and experience with routers, switches, and firewalls.

• Candidates must meet U.S. Government DoD 8140 (formerly 8570) requirements for IAT/IAM level II (typically a CompTIA Security+ or equivalent) for a Principal Network Communications working cloud systems in a classified environment or be able to complete these requirements withing six months of hire.

• Experience designing, implementing, and maintaining LAN/WAN-based networks; managing routing and switching in complex environments; and administering routers, switches, firewalls, VPN technologies, and network security controls.
• Experience working with network security requirements, boundary protection, change control, and documentation in regulated or classified environments.

Preferred Qualifications:

• Bachelor’s degree in Network Engineering, Computer Science, Information Technology, or a related technical discipline.
• Active Top Secret clearance with the ability to obtain and maintain SCI, SAP/SAR access, or Polygraph eligibility as required by the program.
• Microsoft Certified: Azure Network Engineer Associate, AWS Certified Advanced Networking - Specialty, or Cisco Enterprise Cloud Connectivity Specialist certifications.
• Knowledge of NISPOM Chapter 8, ICD 503, RMF, STIGs, JAFAN, JSIG, and related requirements governing classified information system and network operations.
• Experience using network analysis, monitoring, and troubleshooting tools such as Wireshark, SolarWinds, Grafana, Prometheus, and comparable platforms to diagnose complex performance and connectivity issues.
• Familiarity with Ansible and Terraform for automated deployments.
• Experience with native load balancing tools.
• Experience designing, implementing, and troubleshooting advanced WAN and routing solutions, including BGP, OSPF, MPLS, encrypted transport, and complex carrier or transport services.
• Experience configuring TACLANES
• Experience supporting Assessment and Authorization activities, security control implementation, and technical documentation for classified networked systems.
• Experience supporting secure connectivity between on-premises classified networks and cloud-hosted secret environments while maintaining enclave separation and mission assurance.
• Experience collaborating across network, cloud, cybersecurity, systems administration, and program teams to deliver integrated classified infrastructure solutions. 

We offer flexible work schedules, phenomenal learning opportunities, exposure to a wide variety of projects and customers, and a very friendly team environment. At Northrop Grumman, we are on the cutting edge of innovation. Our diverse portfolio of programs means there are endless paths to cultivate your career. We also offer exceptional benefits/healthcare, a 9/80 work schedule, and a great 401k matching program. Come join us!