Network Engineer

This position is designated as an Intermediate-level Network Operations Specialist (DCWF Work Role 441) and is not designated as Key Personnel. The individual plans, designs, installs, configures, tests, operates, maintains, and manages network infrastructure supporting OPTEVFOR Cyber Operational Test & Evaluation (OT&E) missions. Responsibilities span multi-classification environments and include ensuring secure, reliable information sharing across all transmission media in accordance with DoD and DON cybersecurity policies and guidance.

Supported systems include, but are not limited to, NIPR/SIPR networks, cyber exploitation toolsets, circuits, and business systems. The role also supports Risk Management Framework (RMF) activities, vulnerability analysis, and defensive cyber operations to maintain Navy cybersecurity posture and initiatives.

Security Clearance Requirement:
Eligibility for Top Secret / Sensitive Compartmented Information (TS/SCI).

Qualifications

• Bachelors degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET-accredited or CAE-designated institution OR a minimum of five (5) years of experience with demonstrated technical proficiency in network infrastructure and security design, including configuration of routers, switches, firewalls, and load balancers
• Minimum of three (3) years of experience supporting RMF security testing
• Proficiency with automation and scripting tools, including but not limited to Python, Perl, and shell scripting languages

Key Responsibilities

• Provide network engineering, administration, and sustainment of multi-classification networks supporting OPTEVFOR Cyber OT&E missions
• Design, build, test, and maintain virtualized environments to support scheduled cyber OT&E events; validate environments prior to execution and provide real-time troubleshooting support during testing
• Package, maintain, deploy, and sustain Cyber OT&E toolsets and flyaway kits, as required
• Administer and maintain cyber test infrastructure, including:
  • Patch management and system hardening
  • Log review and system activity monitoring
  • User access administration
  • Backup and recovery planning
  • Physical security of IT hardware
  • Disabling unnecessary services
• Design, implement, and administer secure network enclaves supporting penetration testing teams in accordance with DoD cybersecurity policies, STIGs, IAVA/IAVB notices, Tasking Orders, Warning Orders, and Fragmentary Orders
• Apply virtual hosting and server technologies within network architectures
• Configure network infrastructure to support test team user environments and on-keyboard cyber training evolutions
• Support planning, engineering, and acquisition of network hardware and software
• Create, update, and maintain RMF certification and authorization (C&A) artifacts for systems assigned to OPTEVFOR 01D
• Perform vulnerability analysis, develop detailed trend reports, and provide forensic analysis to inform network architecture design and tailored defensive response options
• Brief OPTEVFOR 01D Government leadership on network operations and cybersecurity posture on a weekly basis

DCWF Knowledge, Skills, Abilities, and Tasks (KSATs)

• Knowledge
  • Enterprise information security architecture and network security architecture concepts
  • Network design processes aligned with security and operational objectives
  • Cybersecurity principles (confidentiality, integrity, availability, authentication, non-repudiation)
  • Network protocols, traffic flows, and OSI model concepts
  • Network defense technologies (firewalls, DMZs, VPNs, encryption)
  • Common network-layer attack vectors and mitigation strategies
  • Configuration management, symmetric key rotation, and PKI-based access control
  • RMF processes, security risk assessments, and authorization requirements
• Skills
  • Designing, integrating, installing, configuring, and troubleshooting LAN/WAN components
  • Implementing and testing network contingency and recovery plans
  • Monitoring system performance, availability, and traffic flows using network management tools (e.g., SNMP)
  • Subnetting and network segmentation
  • Integrating new systems into existing architectures
  • Developing and updating architecture documentation and technical artifacts
  • Supporting project cost estimates, design trade-offs, and architecture changes
• Abilities
  • Analyze user requirements to plan and document network architectures
  • Build and integrate secure network frameworks
  • Plan implementation strategies aligned with enterprise environments
  • Implement new system designs, test procedures, and quality standards