Network Engineer

This position is designated as an Intermediate-level Network Operations Specialist (DCWF Work Role 441) and is not designated as Key Personnel
. The individual plans, designs, installs, configures, tests, operates, maintains, and manages network infrastructure supporting OPTEVFOR Cyber Operational Test & Evaluation (OT&E) missions. Responsibilities span multi-classification environments and include ensuring secure, reliable information sharing across all transmission media in accordance with DoD and DON cybersecurity policies and guidance
.

Supported systems include, but are not limited to,
NIPR/SIPR networks, cyber exploitation toolsets, circuits, and business systems
. The role also supports Risk Management Framework (RMF) activities, vulnerability analysis, and defensive cyber operations to maintain Navy cybersecurity posture and initiatives.

Eligibility for Top Secret / Sensitive Compartmented Information (TS/SCI).

• Bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET-accredited or CAE-designated institution OR a minimum of five (5) years of experience with demonstrated technical proficiency in network infrastructure and security design
  , including configuration of routers, switches, firewalls, and load balancers
• Minimum of three (3) years of experience supporting RMF security testing
• Proficiency with automation and scripting tools
  , including but not limited to Python, Perl, and shell scripting languages

• Provide network engineering, administration, and sustainment of multi-classification networks supporting OPTEVFOR Cyber OT&E missions
• Design, build, test, and maintain virtualized environments to support scheduled cyber OT&E events; validate environments prior to execution and provide real-time troubleshooting support during testing
• Package, maintain, deploy, and sustain Cyber OT&E toolsets and flyaway kits
  , as required
• Administer and maintain cyber test infrastructure, including:
  • Patch management and system hardening
  • Log review and system activity monitoring
  • User access administration
  • Backup and recovery planning
  • Physical security of IT hardware
  • Disabling unnecessary services
• Design, implement, and administer secure network enclaves supporting penetration testing teams in accordance with DoD cybersecurity policies, STIGs, IAVA/IAVB notices, Tasking Orders, Warning Orders, and Fragmentary Orders
• Apply virtual hosting and server technologies within network architectures
• Configure network infrastructure to support test team user environments and on-keyboard cyber training evolutions
• Support planning, engineering, and acquisition of network hardware and software
• Create, update, and maintain RMF certification and authorization (C&A) artifacts for systems assigned to OPTEVFOR 01D
• Perform vulnerability analysis
  , develop detailed trend reports, and provide forensic analysis to inform network architecture design and tailored defensive response options
• Brief OPTEVFOR 01D Government leadership on network operations and cybersecurity posture on a weekly basis

• Knowledge
  • Enterprise information security architecture and network security architecture concepts
  • Network design processes aligned with security and operational objectives
  • Cybersecurity principles (confidentiality, integrity, availability, authentication, non-repudiation)
  • Network protocols, traffic flows, and OSI model concepts
  • Network defense technologies (firewalls, DMZs, VPNs, encryption)
  • Common network-layer attack vectors and mitigation strategies
  • Configuration management, symmetric key rotation, and PKI-based access control
  • RMF processes, security risk assessments, and authorization requirements
• Skills
  • Designing, integrating, installing, configuring, and troubleshooting LAN/WAN components
  • Implementing and testing network contingency and recovery plans
  • Monitoring system performance, availability, and traffic flows using network management tools (e.g., SNMP)
  • Subnetting and network segmentation
  • Integrating new systems into existing architectures
  • Developing and updating architecture documentation and technical artifacts
  • Supporting project cost estimates, design trade-offs, and architecture changes
• Abilities
  • Analyze user requirements to plan and document network architectures
  • Build and integrate secure network frameworks
  • Plan implementation strategies aligned with enterprise environments
  • Implement new system designs, test procedures, and quality standards