Got the Government Contractor Blues? Looking for a company that cares and goes beyond just filling another contract billet? Well, look no further! Experience this family-oriented company that takes pride in you and will help you grow where your passions lie. Holding many Defense & Federal government contracts around the globe, with Systems Plus, you have the opportunity to take on new and evolving challenges, aim beyond what you think you are capable of, and work in collaborative, dynamic, and high-tempo environments.
Our employees are our most valued asset, and we invest in our people because we are in it for the long term. We are committed to your success and well-being and offer competitive benefits packages, salaries, bonus/award programs, and a high potential for professional growth and job opportunities worldwide.
Systems Plus is the company for you! Experience the difference, and let’s talk about your future at Systems Plus today.
|
Position Title
|
Network Engineer
|
|
Position Type
|
Full-time, Hybrid
|
|
Position Location
|
Washington, D.C.
|
|
Tracking Code
|
01160
|
|
Daily Responsibilities
|
- Implement and maintain network security controls aligned with NIST SP 800-53, including access control (AC), configuration management (CM), system and communications protection (SC), and audit and accountability (AU) control families.
- Enforce Zero Trust network architecture principles in accordance with NIST SP 800-207, including network segmentation, micro-segmentation, and continuous verification of users and devices.
- Design and implement least-privilege network access controls, ensuring role-based and identity-aware access across all network layers.
- Manage 802.1X port-based network access control to prevent unauthorized device connectivity and enforce authentication at the network edge.
- Configure/maintain centralized logging and audit capabilities for all network devices, ensuring logs are forwarded to SIEM platforms and retained in accordance with compliance requirements.
- Conduct continuous monitoring and vulnerability assessments of network infrastructure, identifying risks and coordinating remediation in alignment with NIST Risk Management Framework (RMF) practices.
- Harden all network devices using secure configuration baselines (e.g., Cisco Secure Configuration Guides), including disabling unnecessary services, enforcing strong encryption protocols, and securing management interfaces.
- Secure public-facing and perimeter network assets by implementing strict ingress/egress filtering, firewall rule optimization, and multi-factor authentication for administrative access.
- Support incident response activities by providing network-level analysis, containment actions (e.g., segmentation, blocking malicious traffic), and forensic data collection.
- Establish and maintain secure network segmentation strategies to limit lateral movement and protect high-value assets and sensitive environments.
- Ensure all network changes follow formal change control processes with security impact analysis, supporting compliance with NIST configuration management requirements.
- Develop, implement, and maintain Network SOPs; review and update all SOPs on at least an annual basis or as required to reflect changes in technology, policy, or security requirements
|
|
Years of Experience
|
Five years relevant experience
|
|
Degree:
|
Bachelor’s degree or equivalent experience
|
|
Requirements:
|
- Experience supporting Cisco-based enterprise network infrastructure across core, distribution, access, and edge environments, including routing, switching, VLANs, VPNs, DNS/DHCP, firewall management, and performance optimization.
- Experience applying NIST SP 800-53 and NIST SP 800-207 concepts to network security controls, Zero Trust Architecture, segmentation, micro-segmentation, least-privilege access, identity-aware networking, and 802.1X network access control.
- Knowledge of vulnerability management, secure device hardening, RMF-aligned remediation, compliance monitoring, risk mitigation, and security assessment support.
- Experience supporting network security operations, including centralized logging, SIEM integration, continuous monitoring, incident response, forensic support, root cause analysis, and remediation.
- Experience maintaining secure network environments through configuration management, patch and firmware management, change control, secure configuration baselines, and operational continuity practices.
- Ability to maintain network documentation, including SOPs, configuration baselines, asset inventories, network diagrams, and technical procedures, and serve as a technical adviser for complicated service desk tickets and network modifications.
|
|
Required: Clearance
|
Public Trust Tier 2 clearance level and background check.
|
