Lab Network Engineer with Security Clearance

Lab Network Engineer ( Location: Colorado Springs, CO Clearance: Active Secret (Required at start) Certification: IAT Level II (Security+ CE or equivalent) Salary: $107,100 – $144,900 + $5,000 Relocation Bonus The Mission Join the C2BMC National Team as a primary Lab Network Engineer. In this high-impact role, you will act as a hybrid Network Engineer and Developer, responsible for the build-out, deployment, and operational integration of secure network infrastructures for the Missile Defense Agency. You will work within an Agile Scrum team to ensure the "backbone" of America’s missile defense is resilient, secure, and high-performing. Key Responsibilities Infrastructure Build-out: Lead the design, racking, and commissioning of routers, switches, and firewalls in a secure lab environment. Packet Analysis: Perform deep-dive traffic analysis—50% of this role involves capturing and deciphering packets (Wireshark) to diagnose latency and throughput. Protocol Management: Configure and maintain BGP, OSPF, UDP Multicast, and GRE Tunnels. Network Automation: Develop scripts and action plans to automate testing and deployments (Python, Ansible, or Puppet experience is a major plus). Collaboration: Act as a technical interface for MDA working-level counterparts and participate in failure review boards and system accreditation efforts. Required Qualifications Experience: 5+ years with a Bachelor’s degree; 3+ years with a Master’s; or 9+ years of relevant experience. Vendor Expertise: Hands-on experience with Juniper (Required) and Cisco equipment. Certifications: Juniper (JNCIA, JNCIS, JNCIP, or JNCIE) is a MUST. Cisco (CCNA/CCNP) is highly preferred. Technical Proficiencies: Deep understanding of the OSI Model, TCP/IP, Firewalls, NAT, and Network Timing. Documentation: Proficiency in creating technical network diagrams via Microsoft Visio. Preferred Skills Previous experience supporting the C2BMC program or MDA. Experience with VMware vCenter and vSphere. Knowledge of encryption methods (TACACS+, Active Directory, GEM-X) and TACLANE gateways.