IPSecure, Inc. is seeking a Cybersecurity Network Engineer to support the design, integration, configuration, testing, and security of advanced lab-based network infrastructure. This onsite role in San Antonio, TX focuses on building secure enterprise network environments and validating changes before they reach production or mission systems.
The position requires an Active TS/SCI security clearance and strong, hands-on experience with Cisco ACI/SDN as well as enterprise routing, switching, and firewall engineering.
Responsibilities
- Design, configure, integrate, secure, and troubleshoot enterprise network infrastructure within a lab and test environment.
- Engineer and support Cisco ACI architectures, including APIC controllers, leaf/spine architectures, tenants, VRFs, bridge domains (BDs), endpoint groups (EPGs), contracts, and external connectivity.
- Support Software-Defined Networking (SDN) technologies and network automation concepts used to centrally manage and secure network infrastructure.
- Configure and troubleshoot Cisco routers and switches, including Layer 2 and Layer 3 networking.
- Develop and maintain IP addressing and subnetting schemes, VLANs, VRFs, routing domains, and network segmentation strategies.
- Configure and troubleshoot routing protocols such as BGP, OSPF, and static routing.
- Engineer and support enterprise firewall and network security solutions, including security policies, access control rules, NAT, VPN connectivity, network segmentation, and traffic inspection.
- Analyze network traffic and connectivity using packet captures, logs, monitoring platforms, and other network diagnostic tools.
- Perform cybersecurity hardening of network infrastructure in accordance with applicable security requirements and organizational standards.
- Identify network vulnerabilities, configuration weaknesses, unnecessary services, and segmentation issues and recommend remediation.
- Support Zero Trust and defense-in-depth network architectures, including segmentation and least-privilege communications between systems and security zones.
- Build and maintain representative network environments used for integration, testing, troubleshooting, cybersecurity validation, and engineering development.
- Create and maintain network diagrams, interface documentation, IP address plans, configuration documentation, test procedures, and engineering artifacts.
- Conduct configuration testing and validation prior to implementation within production or mission environments.
- Troubleshoot complex connectivity issues across routers, switches, firewalls, virtual networks, servers, and applications.
- Coordinate with cybersecurity, systems, virtualization, application, and engineering teams to identify and resolve cross-domain infrastructure issues.
- Support change management, configuration management, technical documentation, and engineering review processes.
Requirements
- Active TS/SCI security clearance.
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- Equivalent experience may be substituted.
- Security+ and CCNA certification.
- 10+ years of experience in network engineering, cybersecurity engineering, network security, or a related technical field.
- Demonstrated hands-on experience configuring and troubleshooting enterprise routers, switches, and firewalls.
- Demonstrated experience with Cisco ACI and Software-Defined Networking (SDN).
- Strong understanding of IP networking, routing, switching, subnetting, VLANs, and network segmentation.
- Experience supporting complex lab, integration, test, development, or production network environments.
- Experience working with virtualized infrastructure.
- Strong troubleshooting and root-cause analysis skills.
- Ability to develop and maintain detailed technical and network documentation.
- Hands-on experience with Cisco Application Centric Infrastructure (ACI) and software-defined networking concepts including Cisco APIC administration and configuration.
- Hands-on experience with Cisco ACI and software-defined networking concepts including ACI leaf/spine architecture, tenants and VRFs, bridge domains (BDs), endpoint groups (EPGs), application profiles, and ACI contracts and filters.
- Hands-on experience with Cisco ACI concepts including physical and virtual domains, VLAN pools, and External Layer 2/Layer 3 connectivity such as L3Out configuration and routing integration.
- Hands-on experience with Cisco ACI concepts including network segmentation and micro-segmentation, ACI troubleshooting and fault analysis, SDN policy-based networking, and network automation and programmable infrastructure.
- Experience integrating ACI with virtualized environments, firewalls, external routing infrastructure, and traditional Cisco networks is highly desired.
Technologies
- Cisco Application Centric Infrastructure (ACI), Cisco APIC
- Software-Defined Networking (SDN)
- Cisco routers and Cisco switches
- Enterprise firewalls
- IP addressing and subnetting
- Network segmentation, including micro-segmentation
- Virtualization technologies
- Packet captures, logs, and monitoring for diagnostics
- BGP, OSPF, static routing
- NAT and VPN connectivity
- Zero Trust and defense-in-depth
- Layer 2 networking and Layer 3 networking
- VLANs, VRFs, BDs (Bridge Domains), EPGs (Endpoint Groups), Application Profiles
- ACI Contracts and Filters
- L3Out configuration and SDN policy-based networking
- Network automation and programmable infrastructure concepts
- Security+, CCNA, and Cisco certification training/certification (including Cisco CCNP Enterprise, Cisco CCNP Data Center, and Cisco Certified DevNet Professional)
Benefits
- Medical, Dental, Vision
- Unlimited Vacation
- Sick Leave
- Paid Federal Holidays
- Education and Certification Reimbursement Program
- 401(k) retirement plan with safe harbor employer match after 3 months
- Prepaid Legal Plan and Identity Protection Plan available
- Accident Insurance
- Critical Illness Insurance
- Hospital Indemnity Insurance available
Preferred Qualifications
- Cisco CCNP Enterprise
- Cisco CCNP Data Center
- Cisco Certified DevNet Professional
- Cisco ACI-focused training/certification
IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
