Network engineer jobs in Reston, VA

MANTECH is seeking a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Chantilly, VA. Responsibilities include but are not limited to: Maintaining, updating, and configuring logging/auditing tools across Sponsor networks and ensuring all network defense capabilities are kept current, patched, and securely configured Designing, testing, and integrating new security products as directed. Beta testing new capabilities when directed, and conducting software testing as required Maintaining a robust library of documentation, to include network diagrams for cyber defense capabilities and sensors, and making documentation available to all personnel with appropriate need-to-know Providing engineering support for all primary systems, such as network-based intrusion detection/prevention Maintaining, updating, and conducting routine vulnerability scanning across all Sponsor networks Ensuring all parts of the infrastructure are in compliance with patching/hardening requirements. Maintaining system baselines and configuration management items, including security event monitoring policies. Analyzing data flows into, out of, and across Sponsor networks to identify and rectify any security gaps Minimum Qualifications: Bachelor's degree and at least 3 years of experience with Risk Management Framework, JSIG, or similar security frameworks Department of Defense (DoD) 8570 Compliant, IAT Level III within 6 months of hire date Experience with Splunk continuous monitoring Must have the ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel, and industry partners. Strong Analytical and Critical Thinking Skills, Interpersonal and People Skills, Leadership Skills, Listening Skills, Multi-Tasking Ability, Communication Skills, Organizational Skills, and Presentation Skills. Preferred Qualifications: Experience with STIGs, EvaluateSTIG, ACAS, NESSUS, and other vulnerability compliance verification tools. Experience with scripting languages (PowerShell), application development (Java, Perl, Python, .NET), databases and analytical tools Experience with security and operational related use cases is desired Clearance Requirements: Must have an active DoD TS/SCI with the ability to obtain a polygraph. Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentation

Do you have experience solving real world problems related to wireless communications? Are you searching for meaningful work to solve crucial communications challenges for the special operations and intelligence communities? If so, we want you to join our team of comms engineers working on a broad set of evolving problems. We are seeking a dedicated engineer to join a hardworking team that loves solving problems and building capabilities that may transition to operational prototypes. Our team is committed to the mission and passionate about developing capabilities for specialized wireless systems! As a Wireless Communications Algorithm Engineer, you will... Research new technologies and develop solutions to address evolving threats. Support digital signal processing (DSP) algorithm development. Provide implementable technical solutions to the Nation's hardest problems. Translate vague concepts into practical, well-defined, and methodical technical plans. Communicate technical results clearly in written reports and presentations. Work with technologies and concepts including, but not limited to wireless, SATCOM, Physical and MAC layer protocols, software defined radio (SDR), waveform design, RF modeling and simulation, RF system analysis, and transceiver design. Qualifications You meet the minimum qualifications for this position if you have ... A Bachelor's degree (or equivalent experience) in Electrical Engineering, Computer Engineering, Physics, Mathematics or another related field, OR a Master's degree (or higher) in one of the same fields of study. Proficiency in communication theory and digital signal processing (DSP), with a foundational knowledge of, and experience with, the physical, data link, or media access layers of communications systems. Experience in modeling and simulation of the physical layer with MATLAB, Python, and/or other languages. Familiarity with some of the following: geolocation, detection and estimation theory, or waveform design. The ability to obtain an Interim Top Secret level security clearance by your start date and can ultimately obtain a Top Secret level clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship. You'll go above and beyond our minimum requirements if you have ... At least ten years of experience in commercial and/or government communication engineering. A wide breadth and depth of wireless systems knowledge. Demonstrated expertise with end to end comms system design. Recent knowledge of DoD and/or intelligence community, sponsors, and programs. A current Top Secret or TS/SCI clearance. This position is on-site at APL's main campus (Laurel, MD) with occasional travel. #LI-AG1 About Us Why Work at APL? The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation's most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates. At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL's campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities at ****************************** All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law. APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact Accommodations@jhuapl.edu. The referenced pay range is based on JHU APL's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis. Minimum Rate $85,000 Annually Maximum Rate $180,000 Annually

Apex Systems is currently hiring for a Sr. Network Engineer supporting a federal government agency! Project Details / Mission Supported: Perform network design and engineering support services for the SAP Program IT architecture. Solve complex Network issues. Engineer, design, implement LANs/WANs/Site-to-site VPNs/Point-to-point/point to multipoint. Serve as network systems engineer overseeing servers, storage and backup systems. Troubleshoot port security issues, VLAN issues and network outages. Control network management activities, data flows and firewall rules. Build network topologies to deliver content from specific providers to users Provide engineering designs, and plans for installation, integration, testing, upgrade, analysis, and maintenance/expansion of the network environment. Prepare network engineering documentation ranging from requirements, conceptual planning, research and development efforts, complete system construction, to customization of existing network configurations and assist in communicating current operational status of networks. Qualified candidates will have the following experience and skills: Bachelor's Degree in related field CCNA OR CCNP certification CompTIA Security+ 7+ years of experience with installation, configuration, and maintenance of Firewalls. Experience keying and upgrading software on Taclane Crypto devices Understand the operation of network protocols and Firewall packet and proxy filters Location: Reston, VA Onsite expectation: Fully Onsite Clearance Level: Candidates must be US citizens able to obtain and/or maintain a Department of Defense TS/SCI CI Poly security clearance as a condition and continuation of employment Salary/Pay range: $90-110/HR If you are interested, please apply here or email an updated copy of your resume to Kristin Catterton at ************************** Apex Systems Military & Veteran Programs At Apex Systems, we are proud to support those who serve. Our commitment to the military community is reflected in our robust veteran hiring initiatives, military-friendly workplace policies, and nationally recognized programs. We value the leadership, discipline, and mission-first mindset that military professionals bring to our team. Join us in continuing your mission. Why Apex is a Top Choice for Veterans and Military Talent: Military-Friendly Employer: Recognized as a Military Friendly Employer for multiple consecutive years. Transition Programs: DoD Skill Bridge program with multiple pathway options. Veteran Hiring Commitment: We actively partner with multiple veteran and military organizations that specialize in IT upskilling and certification training, helping service members and veterans transition into high-demand tech careers Apex Military Network: Internal employee resource group supporting veterans, Guard/Reserve members, and their families. Apex Benefits Overview Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet' as well, which an Apex team member can provide. EEO Employer Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at ******************************** or ************. Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Job Title: Senior Network SME (Zero Trust) Salary: DOE + full benefits Clearance: Public Trust We are seeking an experienced Senior Network Engineer with specialized expertise in Zero Trust technology and a successful track record supporting federal government initiatives. This role will play a critical part in designing, implementing, and maintaining secure network infrastructures aligned with Zero Trust principles within government environments. Job Responsibilities Lead the design and implementation of Zero Trust network architectures, including network segmentation, secure access controls, and micro-segmentation, ensuring robust security across federal government networks. Responsibility to support network roadmap documentation and gap closure tasks. Architect and manage IAM solutions, including centralized authentication, role-based access controls (RBAC), multi-factor authentication (MFA), and privileged access management (PAM) within government systems. Develop and implement network segmentation strategies to partition networks into secure zones, restricting lateral movement and minimizing attack surfaces while adhering to Zero Trust principles. Manage and configure security infrastructure components such as firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and secure gateways aligned with Zero Trust architectures. Implement encryption methodologies, data protection measures, and cryptographic protocols to safeguard sensitive data in transit, at rest, and during processing within government networks. Ensure network infrastructure and configurations comply with federal cybersecurity standards, policies, and frameworks like NIST, FISMA, and other relevant mandates. Provide support for incident response efforts, conduct root cause analysis, and troubleshoot network security issues, ensuring rapid resolution and minimal disruption to government operations. Required Skills/Qualifications Minimum of 12 years + of hands-on experience as a Senior Network Engineer, specifically within federal government environments, focusing on Zero Trust technology. Deep knowledge and practical experience in network security principles, secure architecture design, access controls, and intrusion detection methodologies within government networks. Proficiency in implementing Zero Trust principles, network segmentation, identity and access management, encryption, and secure access controls within complex government environments. Direct experience with microsegmentation and Zero Trust networking strategies. Expertise in implementing centralized authentication mechanisms, such as Active Directory, LDAP, or similar systems, integrated with Zero Trust principles for robust identity management. Profound understanding and practical experience in designing RBAC models aligned with Zero Trust architectures, ensuring access privileges based on roles and responsibilities within government networks. Knowledge of implementing MFA solutions, biometric authentication, smart cards, or token-based authentication methods to strengthen access controls within government systems. Expertise in SDN principles and technologies to enable dynamic network segmentation, policy enforcement, and flexible network provisioning aligned with Zero Trust concepts. Strong understanding of federal cybersecurity regulations, policies, and frameworks such as NIST, FISMA, and other relevant standards applicable to government networks. Proficiency in network protocols, firewall configurations, VPN technologies, encryption standards, and security tools prevalent in federal government settings. Advanced knowledge of VPN technologies, including site-to-site VPNs, remote access VPNs, and secure tunneling protocols, ensuring secure communications within government networks. Hands-on experience in configuring and managing firewalls, ensuring rule-based access control, intrusion prevention, and secure traffic filtering as part of Zero Trust architectures. Relevant certifications in networking (e.g., CCNP, CCIE), cybersecurity (e.g., CISSP, CompTIA Security+), and Zero Trust technologies are highly desirable. Education: Bachelor's degree in computer science, information systems, mathematics, physics, or related discipline Employer will accept years of experience in lieu of a degree.

Signature Labor Services is looking for a Resident Service Support Specialist is a dedicated, on-site professional, responsible for providing technical assistance, troubleshooting, and maintenance of IT systems within a specific location or organization. This rote ensures smooth day-to-day operations by addressing technical issues promptly, supporting end-users, and optimizing system performance. The ideal candidate is a proactive problem-solver with strong technical expertise and excellent customer service skills Responsibilities: Proficient in operating systems (e.g., Windows, mac OS, Red Hat, Linux) Proficient with DWDM Management systems Perform testing, provisioning, and integration of new DWDM circuits or devices Provide first-line support for hardware, software, and network-related issues Conduct training sessions and create user-friendly documentation for common processes Perform regular system updates, patches, and backups to ensure system integrity Requirements: U.S. Secret security (Level 1) clearance required or ability to obtain CCNA Certification required Experience with DWDM Transport networks (high-capacity optical networks that transmit large amounts of data over a single fiber) required 3+ years of experience in a technical support or IT system administration role Education: Bachelor's degree Complete tasks as assigned by the site supervisor Perform all tasks in a timely manner under minimal supervision Must be able to follow both verbal and written instructions Complete all assignments requiring physical activity for a full shift Work all hours assigned. Must be authorized to work in the United States Must have a Valid driver's license and dependable transportation Must pass drug screen and all required background checks. What we offer: Medical insurance Vision insurance Dental insurance Life insurance Short-term disability insurance All employees must have proper PPE hard hat, work boots, safety vest, safety glasses and work gloves. All SLS employees are required to comply with our Substance Abuse Prevention Policy as a condition of employment. SLS may condition offers of employment upon taking and passing of a post-offer/pre-employment drug screen. Call ************ if you have any questions after you apply. Otherwise, our team will follow up with you directly if qualified.

Cleared Network Engineer Full-time, Onsite (JBAB D.C.) An active TS/SCI security clearance is a must to apply! We're looking for an adept networking professional who is passionate about deploying and operating technologies that enable highly scalable and available resources for the applications users rely upon. Company POC is a senior-level technologist with direct experience in the environment. This perspective along with the long-term thinking at the company drives focus on the best all-around match for the customer, team member, and company. Responsibilities: Work within the networking team to administer the existing network environment Serve as an escalation point for network administrators Assist with planning of system design, layout and development of baseline configuration for an enterprise network Assist with developing test plans and procedures to implement and validate the organization's requirement for reliability and high availability. Deploy health monitoring and predictive alerts across all sites and networks. Analyze legacy infrastructure and provide recommendations for lifecycle, modernization, and migration strategies. Collaborate with security teams to ensure compliance with security controls Mentor other technical staff on the team Assist in the design and implementation to scale network automation and management Requirements: 6 years of relevant experience CCNP Infrastructure, Datacenter, or Security (but must be well versed in enterprise route/switch)

The selected candidate will be responsible for the following: Support the ITP network infrastructure, perform all routine maintenance activities, provide guidance on upgrades and system recapitalization, perform availability/capacity management. Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains. Support all documentation to effectively capture the configuration baseline. Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer. Serve as the subject matter expert on all ITP network infrastructure. Basic Qualifications: Bachelors degree and (12)+ years of prior relevant experience or Masters with (10)+ years of prior relevant experience Prior leadership responsibilities Excellent written and oral communication skills Experienced and adept at developing and maintaining technical documents, analyses, and reports Experienced with preparing and presenting briefings to senior customer management, and customer stakeholders Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements Active Top Secret government security clearance; ability to obtain DHS EOD SCI Preferred Qualifications: Master's degree from an accredited college or university in IT Management, Engineering, or related field Proven experience (10+ years) in IT service delivery management Experience with User Activity Monitoring products and platforms Experience with Everfox High Speed Guard Platform Experience with Cisco, Juniper LAN/WAN network infrastructure Experience with Palo Alto Firewalls DHS Cleared preferred CCNP or Higher ForcePoint/FirePower Experience

Harmonia Holdings Group, LLC is an award-winning, rapidly growing federal government contractor committed to providing innovative, high-performing solutions to our government clients and focused on fostering a workplace that encourages growth, initiative, creativity, and employee satisfaction. SME Network Engineer Location: Lorton, VA (22079) Citizenship: U.S. Citizen (required for access to DHS IT systems) Clearance: Must be able to obtain and maintain DHS/ICE Fitness Determination (Public Trust), including a favorable preliminary Fitness and full NBIS eAPP investigation (SF-85P, OF-306, SSA-89, fingerprints, PREA questionnaire if required) Schedule: Full-time; business hours (7:00-5:30, M-F) with required 24/7 on-call availability Hybrid Work: Lorton, VA roles may telework up to 2 days per week; 3 days onsite required (subject to mission needs) Travel: Occasional CONUS travel; local travel within 50 miles is not reimbursable Role Overview Harmonia Holdings Group is seeking an experienced SME Network Engineer to support DHS ICE Homeland Security Investigations (HSI) Title III and Linguists Unit (T3LU) under the CALEA program. This role provides hands-on leadership across all network engineering functions, including architecture, routing, switching, firewall engineering, VPN and PKI integration, segmentation design, troubleshooting, and IA/accreditation-grade documentation. The SME ensures the integrity, resilience, and performance of mission-critical CALEA networks and collaborates closely with Systems, Virtualization, Storage, and Field Engineering teams to ensure end-to-end operational success. This position supports DHS's mission while contributing to Harmonia's overarching goals: delivering premier technology services, driving mission-focused innovation, sustaining organizational excellence, and being an employer of choice for skilled professionals. Responsibilities Network Architecture & Design Design, document, and maintain CALEA network architecture, including: Layer 2/Layer 3 topology IP address schema and subnetting VLAN/VRF segmentation Routing design (OSPF, BGP, EIGRP, static routing) Firewall zoning, NAT policies, and security segmentation VPN tunnels, encrypted transport paths, and PKI integrations COOP/DR network routing and failover paths Produce and maintain authoritative network diagrams, data flows, trust boundaries, and configuration baselines. Evaluate, recommend, and implement enhancements to improve security, availability, and performance. Network Operations & Troubleshooting Serve as the primary network engineer for diagnosing, resolving, and preventing outages across the CALEA enterprise. Perform packet-level analysis (Wireshark/tcpdump), flow analysis, and log correlation to identify and remediate issues. Lead network upgrades, configuration changes, ACL/policy adjustments, and planned maintenance. Monitor network performance and availability; tune routing, firewall, and VPN parameters as needed. Firewall, Security & Accreditation Support Engineer and maintain firewall policies and segmentation (Palo Alto preferred; Fortinet/Cisco ASA experience acceptable). Support security hardening, vulnerability remediation, and IA/ATO documentation requirements. Produce accreditation-ready artifacts, including boundary diagrams, data-flow representations, rule documentation, and enclave segmentation maps. Collaborate with ISSO and security teams to address findings and strengthen compliance posture. Interoperability & Cross-Domain Integration Document and support network dependencies across Active Directory, DNS/DHCP, VMware/vSphere, SAN/iSCSI/NFS storage, and application tiers. Validate end-to-end system functionality after network changes. Partner with Systems, Virtualization, Storage, and Field SMEs to maintain seamless operations across CALEA sites. COOP/DR & Lab Engineering Contribute to COOP/DR planning, design, and testing to ensure high availability and rapid failover capabilities. Support lab environment setup for replication, patch validation, and network simulation. Documentation & Mission Coordination Maintain technical documentation, diagrams, IP plans, SOPs, and configuration repositories. Coordinate with Harmonia and ICE technical leads to resolve issues, support field operations, and sustain mission readiness. Required Qualifications Bachelor's degree in IT, Engineering, or related field OR +5 years equivalent experience. 10+ years of enterprise network engineering experience with increasing responsibility. Technical Proficiency Deep hands-on experience with: Cisco routing/switching (3k-9k platforms) Palo Alto or Fortinet firewalls and policy design VPN architecture, IPsec tunneling, PKI integration Network segmentation using VLANs, VRFs, and security zones Packet capture and analysis Network monitoring and telemetry tools (SolarWinds, NetFlow, Splunk, etc.) Demonstrated ability to produce complete network diagrams and architecture documentation based solely on device configuration, logs, and analysis. Strong understanding of cross-domain interactions (DNS, AD, VMware networking, SAN connectivity). Preferred Certifications CCNA, CCNP Enterprise, or CCNP Security PCNSE Fortinet NSE4/NSE5 CCIE-level competency (or equivalent expertise) Additional certifications may be required after hire and must be obtained within designated timelines. Professional Competencies Excellent communication skills with both technical and non-technical stakeholders. Proven ability to work independently in high-pressure, mission-critical environments. Strong analytical, investigative, and documentation skills. Preferred Experience Experience supporting federal law enforcement IT systems or CALEA-aligned mission operations. Hands-on participation in COOP/DR architecture or failover site execution. Experience with VPN transitions, network segmentation, and multi-site resiliency. Familiarity with Kubernetes/container environments (e.g., JSI platforms). Experience supporting 24/7 high-availability operations. Soft Skills Strong initiative and attention to detail. Adaptability to evolving mission requirements and operational tempo. Collaborative approach with technical teams, vendors, and government partners. Alignment with Harmonia's principles of excellence, collaboration, curiosity, and integrity. Physical Demands / Work Environment Must regularly lift/move up to 50 lbs.; occasionally up to 80 lbs. using a hand truck or lift cart. Requires standing, kneeling, crouching, and navigating server-room environments. Normal vision and hearing required; moderate server-room noise.

CyLogic is looking for a sharp, reliable Data Center Engineer to help us power secure, high-performance infrastructure every day. If you're ready to roll up your sleeves and support the backbone of modern IT, we want you on our team. Responsibilities/Duties: Diagnose and solve routine problems and incidents enhancing first-level and or first contact resolution, or in conjunction with level 2 and level 3 teams. Installation and support of hardware including but not limited to cabling, servers, rack power and racks. Work with senior Data Center staff to create a knowledge base, troubleshooting scripts, and maintain known error documentation. Responsible for the secure operation and maintenance of Cloud infrastructure Monitor, analyze and troubleshoot LAN, WAN, communications and server performance Maintain security of the NOC which includes but may not be limited to maintaining key and lock control for all racks and cabinets and escorting non-employees within secure facilities. Respond to user requested submitted through internal ticketing systems. Monitor and manage systems performance and capacity Monitor and track security compliance Track and Maintain IT inventory of all assets Basic software and maintenance skills Other duties as assigned. Experience and Core Competencies: Technical Certificate or AS degree in Information Systems-Technology related discipline or equivalent experience Basic understanding of networks, servers and data center operations Customer service and communication skills with the ability to develop good working relationships. Ability to work in an organized fashion paying strict attention to detail Ability to interpret system and event messages and alerts via monitoring tools, software applications and generated emails. Excellent problem solving, analytic, and communication skills Active CompTIA Security+, ITIL, BICSI Certification Preferred Physical Requirements: Lifting Up to 50 pounds Frequent walking, standing, bending.

hackajob is collaborating with Telos to connect them with exceptional tech professionals for this role. Primary Responsibilities Operate and maintain secure network solutions operated as a centralized enterprise capability for the United States Army Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide network firewall migration support for the Army global network. Analyze and understand complex firewall security zones and policies with the ability to transform policies between multiple vendor firewall devices while meeting mission requirements. Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies. Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff. Collect, investigate, and identify network resource management strategies and techniques to meet capacity and performance requirements Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture. Document designs, diagrams, drawings, and technical narratives using wiki technologies and common diagram and drawing tools. Basic Qualifications Expert understanding of networking and virtualization of firewalls including VSYS in a multi-tenant environment Demonstrated experience with networking concepts such as LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and firewalls in a virtualized environment. Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation Experience with the following protocols: SFTP, SSH, SCP, MPLS, SNMP, NTP. Must be able to work as part of a team to execute troubleshooting and resolve complex network security issues. Must have excellent written and verbal communication skills. Must be willing to work non-standard shifts to accomplish network migration objectives and goals Must be able to interface with customers.

ISSO Industry: Government Contracting Our client is seeking a talented ISSO to join their team. This position will support the Assistant Secretary for Administration (ASA) under guidance from the CIO's Information System Security Manager (ISSM). The candidate will ensure a portfolio of 4 systems are in compliance with applicable NIST standards, and provide standard ISSO services. The candidate will also work closely with the other ISSOs supporting the client customers to provide leadership and mentoring and ensure consistent delivery of ISSO services. ISSO Key Responsibilities: · Ensure applicable cybersecurity policies are implemented for systems and information system-related physical security also under purview. · Maintain operational security posture consistent with current security policy. · Report actual or suspected computer-security incidents to DOT CSIRC within time frames established by DOT Incident Response policy for incident types in accordance with US-CERT. · Distribute cybersecurity notices and advisories to appropriate personnel and that vendor-issued security patches are expeditiously installed. · Serve as primary security to system owners, common control providers, and users. · Serve as focal point for cybersecurity incident reporting and subsequent resolution. · Assisting ISSM in reviewing contracts for information systems under the Component's control to ensure that cybersecurity is appropriately addressed in contract language. · Ensure all security-related SDLC documentation meets all identified security needs. · Maintain Security Assessment and Authorization (SA&A) documentation for information systems under purview according to DoT Cybersecurity Policy and Compendium. · Ensure selection of NIST SP 800-53 baseline security controls are appropriate for system based on FIPS 199 security categorization, NIST SP 800-53 guidance, and supplemental DOT policy specified in DoT Cybersecurity Compendium. · Assist System Owner, Information Owner, and ISSM in recording all known security weaknesses of assigned information systems in POA&Ms IAW DoT policy and procedures. · Track all security education and awareness training conducted for personnel and contractors, as required by DoT Cybersecurity Policy and Compendium. · Provide security advice to AO and System Owner on all matters (technical and otherwise) involving security of the information system. · Ensure required updates are performed to key documents in accordance with NIST SP 800-37 for continuous monitoring. · Identify changes to systems that may impact security controls, perform security impact assessment of proposed changes, report any change in risk posture, and provide recommendations for risk mitigation. · Ensure proper backup procedures exist for assigned information systems and that procedures are performed and tested in accordance with System Security Plan. · Assist System Owner and ISSM to ensure external connections to/from DoT information systems and networks are provided by an approved DoT Trusted Internet Connection Access Provider (TICAP) or DoT-approved Managed TIC Provider Service (MTIPS). · Ensure audit logs are captured, maintained, and analyzed as required by NIST SP 800- 53 and any supplemental Departmental Cybersecurity Policy and the Compendium. · Ensure DoT enterprise information security management system (CSAM or its successors) accurately contains required information system inventory, categorization, POA&Ms and other security metrics required by DoT CIO through this policy. · Complete mandatory annual specialized information security training. ISSO Required Skills:8+ years of experience in IT Security Certified Information Systems Security Professional (CISSP) certification. Understanding of NIST 800.53 and its applicability to IT Systems. Expertise with Risk Management Framework, FEDRAMP and FISMA. Understanding authentication in the cloud environment. Experience with continuous monitoring of a cloud system Experience working on assessments with third party assessments organization (3PAO) AWS/Azure associate certified ISSO Compensation and benefits: $120,000 Company-supported medical, dental, vision, life, STD, and LTD insurance Benefits include 10 federal holidays and PTO. 401(k) with company matching Flexible Spending Accounts for commuter, medical, and dependent care expenses Tuition Assistance

Focus on system integration and testing within the defense/aerospace industry. Provide production support for computer chassis integration and testing. Author and manage requirements, design specifications, test plans, and technical documentation. Collaborate with cross-functional teams to ensure design feasibility and system reliability. Participate in verification, validation, and lifecycle management activities. Coordinate and oversee the integration of subsystems and components for proper functionality. Conduct system testing, troubleshoot issues, and implement corrective measures. Define, document, and manage system requirements throughout the development lifecycle. Identify and mitigate risks associated with system design and operation. Prepare and maintain comprehensive technical documentation, ensuring compliance with industry standards.

The ESM Systems Engineer is required to be certified at the expert level in multiple disciplines of systems and security (e.g., MCSE & CISSP) and provides expert level engineering and management support for all Enterprise systems. Due to the classified nature of this program, the employee must work on-site in Kuwait. This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position. Responsibilities Provides Enterprise-level support for Active Directory, Azure Active Directory (Entra ID), and Windows File Services in an Enterprise environment for global initiatives. Performs problem Management and Root Cause Analysis for Corporate Identity Management in a large-scale Department of Defense setting. Serves as escalation point for application support and troubleshooting, provides guidance and direction in the resolution of escalated issues and complex production, application, or system problems. Installs, configures, and maintains Microsoft Active Directory, Microsoft Enterprise tools, and third-party software. Coordinates and implement patch management, monthly Windows update deployments process to Servers and Workstations, Analyze SCCM / Intune log files, application packaging, and distribution, operating system deployment (OSD), custom reporting using SQL and creating WQL queries. Create desktop and server images utilizing technologies such as MDT. Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps. Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation. Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure. Performs other duties and assignments as required. Qualifications Security Clearance: Requires an active Secret Clearance Education / Certifications: One-year related experience can be substituted for one year of education if the degree is required. Bachelor's Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field. This position requires candidates to adhere to DoD 8570.01-M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline Environment (BE) certifications cannot also be used as a Computing Environment (CE). The authorized certifications for this job title are listed as follows: BASELINE: Cisco: CCNP: Certified Network Professional - Security CompTIA: CASP+ ce: Advanced Security Practitioner CompTIA: SecurityX ce GIAC: GCED: Certified Enterprise Defender GIAC: GCIH: Certified Incident Handler ISACA: CISA: Certified Information Systems Auditor ISC2: CCSP: Certified Cloud Security Professional ISC2: CISSP (or Associate): Certified Information Systems Security Professional COMPUTING ENVIRONMENT (CE): Microsoft: 365 Certified: Enterprise Administrator Expert Microsoft: Certified: Azure Database Administrator Associate Microsoft: Certified: Azure Security Engineer Associate Microsoft: Certified: Azure Solutions Architect Expert Microsoft: MCSE: Core Infrastructure Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience. Minimum of 5 years of experience (10 preferred) in demonstrating the ability and aptitudes, required to perform technical, managerial, or analytical work and coordination involving management of Enterprise level information systems. Platforms including a combination of the following: Microsoft Active Directory Azure Active Directory (Entra ID) MECM (SCCM) Intune WSUS SQL MIM/FIM ADFS DNS PKI Azure Virtual Desktop in a Wide Area Network. Experience with a customer service-oriented company At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #opentowork #relocation #systemsengineers

This position requires an active TS/SCI security clearance in order to be considered; clearance sponsorship is not available. As a Systems Engineer, you'll collaborate with other engineers to define system requirements, architecture, and design, with the goal to make an impact across the federal government. In supporting the program, you will be required to work 5 days/ per week onsite in the client's Washington, DC location. What you'll do: Collaborate with other engineers to define system requirements, architecture, and design Collaborate closely with key stakeholder partners and IT team to evaluate customer requests for new systems, applications, product standards, and services. Work on the core platform to create and optimize all functions needed to establish a strong platform infrastructure. Perform risk assessments and develop mitigation strategies and ensure compliance with industry standards and regulations. Analyze and validate system designs against requirements and specifications. What you'll need to succeed: 8-10 years of experience as a Systems Engineer provisioning, installing, and supporting on-premise mission critical systems Experience maintaining and managing a on-premise VMWare infrastructure In-depth experience with Infrastructure as Code (IaC), containerization, Kubernetes, Ubuntu, and CI/CD Automation Experience working in a DevSecOps environment Ability to work well on a team as well as individually Ability to think out of the box to help with troubleshooting issues and providing innovative solutions that fit customers' needs Ability to establish and maintain a high level of client trust and confidence with your skills A Bachelor's Degree Active TS//SCI clearance What will make you stand out: Experience with system monitoring tools such as SolarWinds, Grafana, and Prometheus Expertise with container orchestration tools (Rancher, OpenShift, etc.) Experience hardening and securing containers Previous experience with commercial cloud (e.g., AWS, Azure) Passion for learning new development concepts, methodologies, and technologies Like we said, we are big fans of our people. That's why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades. What we want you to know: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. MetroStar Systems is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. The statements herein are intended to describe the general nature and level of work being performed by employees and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of MetroStar Systems. Not ready to apply now? Sign up to join our newsletter here. "EEO IS THE LAW MetroStar Systems, LLC (MetroStar) invites any employee and/or applicant to review the Company's Affirmative Action Plan. This plan is available for inspection upon request by emailing *******************."

Our client is a highly respected Managed Service Provider (MSP) known for empowering IT professionals to excel. With a strong foundation in modern technology and a proactive, solutions-driven approach, they foster an environment where motivated individuals can thrive. The company deeply values its team and invests in ongoing professional growth and development. Role Overview They are seeking a Systems Engineer who will play a key role in building and maintaining high-performance network systems for a diverse client base. In this role, you'll design and implement innovative technical solutions while providing expert support and maintenance. You'll be an essential contributor to ensuring reliable, seamless technology operations-all within a well-established framework of proven best practices. Key Responsibilities: Plan and support client network and computing infrastructure. Perform administration of servers and virtual server clusters. Install, configure, and maintain network hardware, systems, services, equipment, and devices. Monitor and apply performance-enhancing changes to network architectures. Monitor and maintain network security systems and technologies. Administer software and network security. Maintain user account, permission, email, and threat management methodologies. Manage system back-up and restore protocols. Document network problems and resolutions for future reference. Create and maintain documentation for all aspects of hardware, networks, and systems including key standards and processes. Travel to and from client work sites as needed with personal vehicle. Work on-call after hours support rotation as needed. Be available after hours/weekends for project work as needed. Monitor queue and cover support extension and remote tickets as needed. Qualifications: Bachelor's Degree in Computer Science or Information Technology preferred. Minimum 3-5 years of network administration, design, and execution experience. Minimum 1-2 years of IT management-related experience. 1-2 years of prior experience and the demonstrated ability to be successful in a client-focused environment. Experience with Windows, Apple OS, HP/Aruba, Cisco Systems, and SonicWall. Experience in network infrastructure including switches, routers, cabling, racks, firewalls, LAN, WAN, TCP/IP, DNS, UDP, Latency, VPN, Terminal Services, VolP, and QoS. Web development knowledge. Experience with Azure and AWS. Experience in VMWare virtualization and Active Directory. Understanding of in-house systems architecture and cloud-based architectures required. Excellent communication skills with the ability to write reports, business correspondence, and procedure manuals, as well as providing clear communications via email and in person to clients and business associates. Strong project management skills. Ability to problem-solve and troubleshoot. Thrives in a fast-paced, entrepreneurial setting and excels when working both independently and as part of a team. Ability to accurately track timekeeping. If you are interested in joining an organization that offers growth, challenge and an opportunity to work in a variety of industries, please send your resume for immediate consideration.

Senior Azure Security Engineer & O365 - Eastbay Systems Hybrid - Washington, DC (3 days onsite per week) Eastbay Systems is expanding our cloud security engineering team and seeking a Senior Azure Security Engineer with deep experience securing Azure and Microsoft 365 environments in compliance-driven government and regulated industries. This is a hybrid role requiring three days onsite each week in Washington, DC. The position is hands-on and architecture-focused, emphasizing Azure security, IAM, automation, NIST CSF 2.0 alignment, and FedRAMP-compliant continuous monitoring. ⸻ Key Responsibilities • Lead Azure security engineering, hardening, and continuous monitoring aligned to FedRAMP, FISMA/RMF, and NIST CSF 2.0 frameworks. • Architect secure Azure solutions including identity, networking, segmentation, encryption, automation, and SIEM integrations. • Engineer IAM controls using Azure AD, Conditional Access, PIM, B2B, and Zero Trust principles mapped to FedRAMP/NIST control families. • Configure and operationalize Microsoft Sentinel, Defender suite, Secure Score, and Azure-native monitoring/threat detection. • Build and maintain IaC using Bicep, ARM, Terraform, and automation frameworks such as PowerShell or Ansible. • Conduct vulnerability assessments (Tenable/Nessus), risk analysis, and remediation aligned to FedRAMP and NIST CSF 2.0 categories. • Secure and manage Microsoft 365/O365 (including GCC High), Exchange Online, Intune, SharePoint, Teams, DLP/MDM/MAM. • Document architectures, system baselines, boundary diagrams, and FedRAMP security package content (SSP, POA&M, evidence). • Provide engineering guidance and mapping to NIST CSF 2.0 Identify/Protect/Detect/Respond/Recover functions. ⸻ Required Skills & Experience • Extensive hands-on experience in Azure security architecture, NSGs/ASGs, firewalls, encryption, segmentation, and monitoring. • Deep understanding of FedRAMP, NIST CSF 2.0, and FISMA/RMF requirements. • Expert-level experience with Azure AD, RBAC, Conditional Access, OAuth, SSO, MFA, and workload identity management. • Strong background in cloud security operations, SIEM pipelines, Defender/Sentinel, incident response, and threat analytics. • Infrastructure-as-Code (IaC) experience using Bicep, ARM, Terraform and automation with PowerShell/Ansible. • Experience with STIGs, CIS Benchmarks, Azure Security Benchmark, and compliance-driven hardening. • Deep knowledge of Microsoft 365/O365/GCC High security configuration and governance. • AI automation experience with Copilot, Claude, Gemini, etc. (preferred). • Certifications such as Azure Solutions Architect Expert, CISSP, AZ-500, SC-100 are a strong plus. ⸻ Bonus / Preferred Experience • Kubernetes/AKS security • GCC High and multi-tenant boundary security • RHEL security administration • Secure Score remediation automation • B2B/B2C identity federation ⸻ Role Details • Job Type: Full-time • Schedule: Hybrid - 3 days onsite in Washington, DC, 2 days remote • Benefits: 401(k), health/dental/vision insurance, FSA, PTO

We are seeking a Mid-Senior level IT Support Specialist who is skilled in ConnectWise, Windows servers, Azure, Hyper-V, VMware, Firewalls, TCP/ IP, DHCP, and DNS. The ideal candidate is a team player, able to hit the ground running, an excellent communicator and client relationship builder. The IT Support Engineer will be joining a customer-service driven MSP focused on "white glove" support. This MSP is well structured with respect to operations/ procedures, is big on automation, and has an extremely low turnover rate. They truly care for their employees and place a major emphasis on work life balance so much so they do not have any 24/7 clients compared to other MSP's. IT Support Engineer (Tier 2.5) MSP Responsibilities: Microsoft 365 administration & migration support Azure infrastructure (design, implementation, management) System Administration (Windows Servers) Security & compliance to safeguard infrastructure Backup & disaster recovery Network Infrastructure management (configure firewalls, provide support) IT Support Engineer (Tier 2.5) MSP Requirements: 3+ years of Microsoft cloud administration 3+ years of experience working for a Managed Service Provider REQUIRED* In-depth knowledge of Azure Networking, Azure Active Directory, Azure Storage, Azure Virtual Machines Experience with backup & disaster recovery Experience migrating clients over to the cloud Experience with VMware Experience with ConnectWise MCSE, MCSA, CCNA, AZ-400 a major plus IT Support Engineer (Tier 2.5) MSP Benefits: Salary: $80,000-$100,000 Medical, Dental, Vision insurance PTO + Company paid holidays 401k+ 3% match Employee growth plans & certification reimbursement Opportunity to work heavily in cloud technology

About the Company Que Technology Group, Inc., is seeking a Senior Systems Engineer to support an exciting intelligence organization. About the Role As a Principal Systems Engineer, you will be responsible for designing, implementing, and maintaining enterprise-level systems that support mission-critical operations. You will work with ONEROOF, PITCHHITTER, NiFi, and various Systems Administration (SA) components, ensuring seamless virtualization, Linux environments, GOTS product integration, and Windows Server administration. Responsibilities Architect, configure, and maintain systems utilizing ONEROOF, PITCHHITTER, and NiFi to optimize workflow and data processing. Provide virtualization support, including cloud-based and on-premises solutions. Administer and troubleshoot Linux-based environments, ensuring high availability and security compliance. Manage, maintain and deploy GOTS (Government Off-The-Shelf) products, integrating them within complex system architectures. Oversee Windows Server administration, including performance tuning, security enhancements, and automation. Collaborate with cross-functional teams to ensure robust system design and operational efficiency. Develop and implement best practices for system security, monitoring, and documentation. Qualifications Bachelor's degree in a qualified engineering field or a related discipline from an accredited college or university, plus twenty (20) years of systems engineering experience; additional five (5) years of experience may be considered in lieu of degree. Experience with ONEROOF, PITCHHITTER and NiFi. Required Skills Experience with FORNSAT systems and Systems Integration. Preferred Skills Experience with GOTS products. Security Clearance Security Clearance: Active TS/SCI with Polygraph. Pay range and compensation package Competitive salary. Company Medical/Dental/Vision plans - Company paid. Short-term Disability, Long-term disability and Life Insurance - Company paid. Business/ First Class travel upgrade for 7 hour or longer flights & company card will be provided for expenses. Vacation / Personal days granted at 25 days per year. Paid Federal Holidays - 11 days. $5,000 Annual Professional Development Fund plus 40 paid hours if in class. 401K with 6% company match; all contributions are immediately vested by Employee. Employee will be paid a bonus of $10,000 per employee hired based on their referral. Up to 3 paid Code Red days due to customer closure. Equal Opportunity Statement Que Technology Group, Inc., is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

SpaceNav is seeking a talented Systems Engineer to join our team. This full-time position will be based on-site at the NOAA Satellite Operations Facility located in Suitland, MD, and will support NOAA's Office of Space Commerce (OSC) in developing the Traffic Coordination System for Space (TraCSS). As a TraCSS Systems Engineer, you will be responsible for defining and managing TraCSS system requirements, anticipating future needs for the TraCSS system, and assessing SSA software vendors. A strong foundation in mathematics and engineering is required, along with a deep understanding of the mathematical principles underpinning key astrodynamics and SSA concepts - such as orbit determination, covariance realism, maneuver planning, and conjunction assessment. Responsibilities Manage the set of TraCSS system and software requirements Develop operational user scenarios and test cases that will be used in product validation and operational acceptance testing. Work with the Office of Space Commerce staff to evaluate, test, and onboard third-party SSA data products and services. Coordinate with DoD personnel, satellite operators, and other mission stakeholders in support of the SSA mission. Participate in technical discussions between government agencies and industry. Qualifications US citizenship required. Bachelor's degree in aerospace engineering, physics, mathematics, or related field. 2+ years of relevant work experience in satellite operations. Familiarity with cloud computing technologies. Experience with software development lifecycle and agile methodologies. The salary range for this role is $100,000 - $120,000 per year.