Network Vulnerability Remediation Engineer - Mid

Overview

Mid-level network vulnerability remediation engineer supporting the Army Global Unified Network (AGUN) program, identifying, analyzing and remediating security vulnerabilities across enterprise network devices.

What you'll do

• Analyze and remediate security vulnerabilities affecting enterprise network devices and infrastructure.
• Evaluate vulnerability findings, vendor security updates, patches, and recommended mitigation strategies.
• Develop, test, and implement security patches, configuration changes, and vulnerability remediation solutions.
• Execute approved network configuration changes and vendor updates through established ASI and change-management processes.
• Support DoD security requirements, including STIG implementation and network hardening.
• Collaborate with Information Assurance teams and the AGUN Cybersecurity Service Provider (CSSP) to address security risks and maintain compliance.
• Troubleshoot network connectivity, performance, and security issues following remediation activities.
• Perform network device upgrades, patching, configuration management, and lifecycle maintenance.
• Develop vulnerability assessments, patch/upgrade analyses, mitigation configurations, testing results, and production release plans.
• Document remediation activities, implementation results, and ticket closure evidence.
• Maintain network configuration records, technical documentation, and operational procedures.
• Work independently on assigned engineering tasks while collaborating with senior engineers on complex issues.

What you'll need

• Active DoD Secret security clearance and U.S. citizenship.
• Bachelor's degree in a related technical field with 4–8 years of relevant experience, or approximately 8–12 years of relevant experience without a degree.
• DoD 8570/8140 IAT Level II certification (such as Security+) and an approved Computing Environment (CE) certification.
• Hands-on experience with network device patching, firmware upgrades, configuration management, and vulnerability remediation.
• Strong knowledge of enterprise networking, including LAN/WAN, BGP, TCP/UDP, IPSec, VPNs, Layer 2/Layer 3 routing, MPLS, and firewalls.
• Experience with at least one network management platform, such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
• Hands-on experience with at least two of the following: Cisco, Juniper, Palo Alto, Dell Networking, Remote Access VPN (RAVPN), GlobalProtect, AppGate.
• Experience implementing DoD STIGs and network security hardening.
• Familiarity with SFTP, SSH, SCP, SNMP, and NTP.
• Ability to troubleshoot and resolve moderately complex network issues.
• Strong communication, documentation, and customer-facing skills.
• Ability to work independently and collaborate with geographically dispersed technical teams.
• Flexibility to work nonstandard shifts when required.
• Willingness to travel up to 10%.

Nice to have

• Experience supporting U.S. Army, DISA, or other DoD enterprise networks.
• CCNA, CCNP, or equivalent networking certification.
• Experience with network modernization, migration, or infrastructure transformation.
• Hands-on experience with Cisco SD-WAN.
• Experience configuring or supporting Palo Alto Next-Generation Firewalls (NGFW).
• Familiarity with virtualized network infrastructure.
• Knowledge of Git, GitLab CI/CD, Ansible, Terraform, or Puppet.
• Basic Python scripting experience for network automation.
• Experience supporting large, geographically dispersed enterprise networks.
• Familiarity with DoD cybersecurity policies and compliance requirements.
• Experience creating network diagrams, configuration records, and technical documentation.

Details

• Remote position.
• Up to 10% travel.
• Active Secret clearance required; U.S. citizenship required.
• Interview requires camera on and photo for identification; if an offer is extended, the interviewer will take the candidate's picture for identification purposes.
• Pay range $73,450.00 – $132,775.00.