Network Administrator

About Agile Defense   At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.   Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests. Requisition #: 1450 Job Posting: Senior Network Engineer / Admin Location: Redstone Arsenal, Alabama, 35898 Position Type: Full-Time Security Clearance: Active DoD Secret Clearance Required Work Schedule: Onsite Certification: Must hold a DoD 8570 IAT Level II certification (e.g., CompTIA Security+ CE).     Job Summary   We are seeking a highly skilled and experienced Senior Network Operator to manage, secure, and maintain the critical network infrastructure at a premier US Army installation. The ideal candidate will possess deep technical expertise in a range of advanced networking technologies and a comprehensive understanding of Department of Defense (DoD) security protocols. This role is essential for ensuring the stability, integrity, and security of network services that support critical mission objectives. You will be responsible for enforcing rigorous security standards, including STIGs, and leveraging automation to enhance network efficiency and reliability.   Key Responsibilities Area Tasks   Network Administration • Administer, configure, and maintain Palo Alto firewalls, ensuring robust security policies and threat prevention. • Manage and troubleshoot complex campus networks built on Cisco Catalyst 9300 stacked switches and 9400 series chassis. • Implement and manage network access control (NAC) policies using Cisco Identity Services Engine (ISE). • Oversee the configuration, deployment, and management of a large-scale wireless infrastructure using Cisco 9800 Wireless Controllers. Security & Compliance • Ensure all network devices are configured and maintained in strict compliance with DoD Security Technical Implementation Guides (STIGs) and Army cybersecurity directives. • Conduct regular security audits, vulnerability assessments, and remediation activities in response to ACAS and CTO initiatives. • Respond to and investigate cybersecurity incidents in coordination with the security operations team. Network Automation • Develop and maintain scripts using Python, PowerShell, or Ansible to automate routine network administration tasks, device configuration, and compliance checks. Experience with Linux Bash scripting is also preferred. • Assist in the development of a network automation framework to improve operational efficiency. Operations & Support • Monitor network performance, troubleshoot complex connectivity and performance issues, and ensure high availability of all network services. • Maintain comprehensive and accurate documentation of network architecture, device configurations, and standard operating procedures (SOPs). • Provide senior-level technical support and mentorship to junior team members.   Qualifications Required Qualifications:   · Experience: 5+ years of experience as a Network Engineer or Senior Network Operator in a DoD or similar high-security environment. · Security Clearance: Must possess an active DoD Secret or Top Secret security clearance.   · Technical Expertise:   o In-depth, hands-on experience with Palo Alto Firewalls (PAN-OS, Panorama). o Advanced knowledge of Cisco Switching (Catalyst 9300 & 9400 series, StackWise Virtual, high availability). o Proven experience deploying and managing Cisco ISE for 802.1x and NAC. o Strong proficiency in managing campus mesh Cisco 9800 Wireless Controllers and associated Wi-Fi 6 access points. o Basic knowledge of F5 BIG-IP load balancers (LTM). · Security Knowledge: Comprehensive understanding and practical application of DoD STIGs for network devices. · Automation: Basic scripting and automation skills with at least one of the following: Python, PowerShell, or Ansible. · Certification: Must hold a DoD 8570 IAT Level II certification (e.g., CompTIA Security+ CE).   Highly Preferred Qualifications:   · Technical experience with managing and deploying Zero-Trust Architecture (ZTA) concepts. · Hands-on experience with Cisco Software-Defined Access (SD-Access). · Knowledge of VPN-less Network solutions and secure remote access technologies. · Familiarity with Privileged Access Security/Management (PASM/PAM) solutions. · Experience with IPv6 planning, implementation, and management. · Experience using Elasticsearch (Elastic Stack) for log analysis and monitoring. Preferred Qualifications: · Advanced industry certifications such as CCNA, CCNP Enterprise/Security, or Palo Alto Networks Certified Network Security Engineer (PCNSE). · Experience with advanced network monitoring, logging, and analysis tools (e.g., SolarWinds, Splunk, Wireshark). · Advanced scripting capabilities for complex network automation workflows. · Bachelor's degree in a related technical field.Requsitin