Network Administrator III

Requisition #: 1391

Job Posting: Network Administrator III

Location: Redstone Arsenal, Alabama, 35898

Position Type: Full-Time

Security Clearance: Active DoD Secret Clearance Required

Work Schedule: Hybrid - This position follows a customer-specific hybrid schedule, which is currently 3 days onsite and 2 days telework per week. This policy is subject to change based on mission requirements.

· Certification: Must hold a DoD 8570 IAT Level II certification (e.g., CompTIA Security+ CE).

---

Job Summary

We are seeking a highly skilled and experienced Senior Network Operator to manage, secure, and maintain the critical network infrastructure at a premier US Army installation. The ideal candidate will possess deep technical expertise in a range of advanced networking technologies and a comprehensive understanding of Department of Defense (DoD) security protocols. This role is essential for ensuring the stability, integrity, and security of network services that support critical mission objectives. You will be responsible for enforcing rigorous security standards, including STIGs, and leveraging automation to enhance network efficiency and reliability.

---

Key Responsibilities

Area Tasks

Network Administration

• Administer, configure, and maintain Palo Alto firewalls, ensuring robust security policies and threat prevention.

• Manage and troubleshoot complex campus networks built on Cisco Catalyst 9300 stacked switches and 9400 series chassis.

• Implement and manage network access control (NAC) policies using Cisco Identity Services Engine (ISE).

• Oversee the configuration, deployment, and management of a large-scale wireless infrastructure using Cisco 9800 Wireless Controllers.

Security & Compliance

• Ensure all network devices are configured and maintained in strict compliance with DoD Security Technical Implementation Guides (STIGs) and Army cybersecurity directives.

• Conduct regular security audits, vulnerability assessments, and remediation activities in response to ACAS and CTO initiatives.

• Respond to and investigate

cybersecurity incidents in coordination with the security operations team.

Network Automation

• Develop and maintain scripts using Python, PowerShell, or Ansible to automate routine network administration tasks, device configuration, and compliance checks. Experience with Linux Bash scripting is also preferred.

• Assist in the development of a network automation framework to improve operational efficiency.

Operations & Support

• Monitor network performance, troubleshoot complex connectivity and performance issues, and ensure high availability of all network services.

• Maintain comprehensive and accurate documentation of network architecture, device configurations, and standard operating procedures (SOPs). • Provide senior-level technical support and mentorship to junior team members.

---

Qualifications

Required Qualifications:

· Experience: 5+ years of experience as a Network Engineer or Senior Network Operator in a DoD or similar high-security environment.

· Security Clearance: Must possess an active DoD Secret or Top Secret security clearance.

· Technical Expertise:

o In-depth, hands-on experience with Palo Alto Firewalls (PAN-OS, Panorama).

o Advanced knowledge of Cisco Switching (Catalyst 9300 & 9400 series, StackWise Virtual, high availability).

o Proven experience deploying and managing Cisco ISE for 802.1x and NAC.

o Strong proficiency in managing campus mesh Cisco 9800 Wireless Controllers and associated Wi-Fi 6 access points.

o Basic knowledge of F5 BIG-IP load balancers (LTM).

· Security Knowledge: Comprehensive understanding and practical application of DoD STIGs for network devices.

· Automation: Basic scripting and automation skills with at least one of the following: Python, PowerShell, or Ansible.

· Certification: Must hold a DoD 8570 IAT Level II certification (e.g., CompTIA Security+ CE).

Highly Preferred Qualifications:

· Technical experience with managing and deploying Zero-Trust Architecture (ZTA) concepts.

· Hands-on experience with Cisco Software-Defined Access (SD-Access).

· Knowledge of VPN-less Network solutions and secure remote access technologies.

· Familiarity with Privileged Access Security/Management (PASM/PAM) solutions.

· Experience with IPv6 planning, implementation, and management.

· Experience using Elasticsearch (Elastic Stack) for log analysis and monitoring.

Preferred Qualifications:

· Advanced industry certifications such as CCNA, CCNP Enterprise/Security, or Palo Alto Networks Certified Network Security Engineer (PCNSE).

· Experience with advanced network monitoring, logging, and analysis tools (e.g., SolarWinds, Splunk, Wireshark).

· Advanced scripting capabilities for complex network automation workflows.

· Bachelor's degree in a related technical field.