Network Engineer - Senior
Required skills
- Top Secret Clearance
- polygraph
- Palo Alto
- DevSecOps
- AI assisted monitoring
- LAN/WAN
- Cloud
- Security Infrastructure
- diagnostic tools
Role summary
Fantom Corporation seeks a Senior Network Engineer to lead the design, implementation, and optimization of resilient, secure network infrastructures for a mission-critical enterprise supporting defense and intelligence programs. The role requires strategic and technical leadership in network modernization, security architecture, and performance optimization, ensuring reliable communications. Responsibilities include identifying and implementing network security solutions, disaster recovery procedures, and troubleshooting network issues. A Top Secret Clearance and willingness to obtain a polygraph are mandatory. The ideal candidate possesses expert knowledge of diagnostic tools, LAN/WAN, Cloud, and Security Infrastructure, with experience in DevSecOps and AI-assisted monitoring, specifically with Palo Alto technologies.
Education: Bachelor’s degree required
Experience: Minimum of 8 years of relevant experience
Position Summary
We are seeking a Network Infrastructure SME to lead the design, implementation, and optimization of resilient, secure network infrastructure supporting mission-critical operations. This role provides strategic and technical leadership in network modernization, security architecture, and performance optimization across complex, multi-enclave environments.
The SME works closely with security, architecture, and operations teams to deliver reliable communications, implement zero-trust principles, and maintain secure connectivity. The position also supports virtualization, hyperconverged infrastructure, storage, monitoring, and identity services that underpin enterprise network operations.
Responsibilities
Design and implement enterprise network architectures that support secure, mission-critical operations.
Lead zero-trust network design and secure cross-enclave interoperability initiatives.
Configure and maintain routing, switching, firewalls, VPNs, tunneling, and access controls.
Optimize network performance, availability, reliability, and security across multiple enclaves.
Establish and maintain network security architecture standards, technical documentation, and governance processes.
Lead network modernization efforts aligned with enterprise strategy and zero-trust principles.
Support secure communications and connectivity across classified and highly regulated environments.
Provide technical leadership for infrastructure planning, implementation, integration, and troubleshooting.
Configure and maintain virtual networking and hyperconverged infrastructure environments.
Support enterprise storage systems and secure file transport services.
Implement network-based and host-based monitoring, alerting, and vulnerability scanning.
Integrate identity and access management services with infrastructure access controls.
Partner with security, architecture, and operations teams to resolve complex issues and maintain resilient systems.
Required Qualifications
Extensive experience designing, implementing, and supporting enterprise network environments.
Strong expertise in routing, switching, firewalls, VPNs, network security, and access control technologies.
Experience implementing zero-trust architectures and secure communications solutions.
Advanced troubleshooting and network performance analysis skills.
Experience supporting mission-critical, highly secure, or regulated environments.
Experience integrating networking with virtualization, storage, monitoring, and identity services.
Strong technical leadership, communication, collaboration, and documentation skills.
Technical Requirements
Networking
Cisco switching, routing, firewalling, and site-to-site connectivity, including IPsec, DMVPN, and SD-WAN.
Arista switching.
Tunneling and VPN technologies, including GRE, IPsec, SSH, SSL VPN, OpenVPN, and WireGuard.
Advanced networking for specialized, multi-tiered applications.
Virtual and distributed switching across VMware, Proxmox, and Nutanix environments.
Client-server and site-to-site VPN solutions.
Integration and troubleshooting of diverse vendor platforms and equipment.
Virtualization and Hyperconverged Infrastructure
VMware/Broadcom technologies, including ESXi, vSphere, vCenter, vSAN, VxRail, cluster management, and licensing.
Proxmox host and cluster configuration, management, networking, and Ceph administration.
Nutanix host and cluster configuration, Prism Central management, and Nutanix Distributed File System (NDFS) administration.
Large-Scale Data Storage
QNAP, Synology, TrueNAS, and NetApp platforms.
File sharing and transport technologies, including Samba, SSH, SFTP, and NFS.
Monitoring and Security
Network-based and host-based data collection and monitoring.
Internal and external alerting, including SMTP configuration.
Active vulnerability scanning using tools such as Nessus.
Familiarity with Splunk for security information and event management (SIEM).
System Administration and Identity Management
Linux administration, including Rocky Linux, Red Hat Enterprise Linux, Amazon Linux, and Ubuntu.
Windows and macOS administration.
IPA/FreeIPA, LDAP/OpenLDAP, and Keycloak.
Linux access controls using SSSD and host-based access control (HBAC).
Supporting Applications and Platforms
Splunk, Nginx, Confluence, Jira, Docker, Kubernetes, GitLab, and Jupyter.
Preferred Qualifications
Master’s degree in Information Technology, Network Engineering, Cybersecurity, or a related field.
Experience supporting federal, defense, intelligence, or classified network environments.
Expertise in multi-enclave or cross-domain network architectures.
Experience with cloud networking, software-defined networking (SDN), and hybrid cloud environments.
Knowledge of security accreditation processes and compliance frameworks.
Relevant certifications such as CCNP, CCIE, CISSP, JNCIP, JNCIE, AWS Certified Advanced Networking, or equivalent credentials.
Similar roles
- Parsing Architect (AI) - SeniorFANTOM CORPORATION · Chantilly, VA · Hybrid
- Ontology Architect and Knowledge Modeling Specialist - SMEFANTOM CORPORATION · Chantilly, VA · Hybrid
- Network EngineerKBR · Huntsville, AL · Onsite
Network EngineerCanopy Children's Solutions · Jackson, MS · Onsite
IT Network EngineerCoolSys - Refrigeration and HVAC Systems · Unavailable · Onsite
Network Engineer IV - 530711University of Alabama · Tuscaloosa, AL · Hybrid
