Network Security Engineer (17804)

Location: Amarillo, TX - Pantex Plant Job Title: Network Security Engineer Career Level From: Associate Career Level To: Senior Specialist Organization: Networking (51223887) Job Specialty: Network Administration ## What You'll Do We are seeking a highly motivated and experienced Network Engineer to join our dynamic Information Technology (IT) team. As a Network Engineer, you will be integral to a national security mission focused on maintaining the safety, security, and effectiveness of the United States nuclear weapons stockpile. Operating within the Network Operations team of the Information Technology (IT) organization, this role involves designing, implementing, and managing complex network architectures, ensuring high availability, performance, and security. The ideal candidate will have a strong understanding of network infrastructure, security, and troubleshooting, with a proven track record of maintaining and optimizing complex network environments. This role requires a professional who can balance day-to-day operational support with involvement in network modernization initiatives. Responsibilities: - Administer and maintain enterprise networks, including configuring and lifecycle management of network devices such as routers, switches, firewalls, virtual private network (VPN)s, and wireless infrastructure. - Perform network maintenance and system upgrades, including service packs, patches, hotfixes, and security configurations. - Monitor network performance and integrity, ensuring the stability, reliability, and security of the network. - Troubleshoot and resolve complex network issues in a timely manner. - Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, secure sockets layer (SSL) decryption, policy optimization, and intrusion detection/prevention systems (IDS/IPS). - Develop and deploy scalable and resilient network architectures to support high availability, fault tolerance, and future growth. - Engineer and support complex routing strategies using protocols such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP), ensuring optimal route redistribution, convergence, and path selection. - Design, deploy, and manage hybrid network topologies, including integration with cloud environments (e.g., Microsoft Azure Virtual Networks, ExpressRoute, peering). - Support the implementation and management of Network Access Control (NAC) solutions (e.g., Cisco Identity Services Engine (ISE) for endpoint compliance and identity-based access control. - Administer, monitor, and support Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and other Cisco Voice over Internet Protocol (VoIP) systems, including voice gateways, internet protocol (IP) phones, and their associated infrastructure, to ensure reliable communication services. - Deploy, configure, and maintain Cisco wireless network infrastructure, including wireless Local Area Network (LAN) controllers (WLCs) and access points, to ensure seamless and secure wireless connectivity. - Maintain accurate technical documentation, including topology diagrams, configuration baselines, IP address management, and change control records. - Collaborate with other IT disciplines, including cloud, systems, and security teams, to deliver integrated solutions. - Provide technical leadership and mentorship to junior technical staff as needed. ## What You Can Expect - Meaningful work and unique opportunities to support missions vital to national and global security. - Top-notch, dedicated colleagues. - Generous pay and benefits with a stable organization. - Work-life balance fostered through flexible work options and wellness initiatives. ## Minimum Job Requirements - Bachelor's degree in engineering/science/information technology discipline. - OR Master's degree in engineering/science/information technology discipline. - OR applicants without a bachelor's degree may be considered based on a combination of at least 8 years of completed education and/or relevant experience. ## Department of Energy (DOE) Order 426.2A Requirements Not applicable. ## Preferred Job Requirements Bachelor's degree in engineering/science/information technology discipline with a minimum of four years of relevant experience or a Master's degree in engineering/science/information technology discipline with a minimum of two years of relevant experience. Network Infrastructure Management: In-depth knowledge and hands-on experience in the implementation, configuration, and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions. Network Security Operations: Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures, actively implementing and maintaining security protections across all networked devices such as switches, routers, and firewalls. Effective Communication and Collaboration: Exceptional communication skills, with the ability to effectively collaborate with customers, vendors, and technical personnel across various departments and organizations. Problem Solving and Technical Documentation: Ability to clearly and effectively present complex technical and operational information both verbally and in writing, solve intricate technical problems, and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation. Demonstrated Technical Expertise: Proven hands-on experience in the following areas: Cisco Switches / Routers (configuration, troubleshooting, and maintenance) Palo Alto Firewalls (configuration, policy management, and troubleshooting) Cisco ASA / FirePower (implementation, and support) Cisco VoIP (administration, monitoring, and troubleshooting of Cisco Unified Co