Network Security Engineer

Pantex is hiring a Network Security Engineer to support its national security mission as part of the Information Technology Network Operations team. The role administers and secures enterprise networks, troubleshoots complex issues, supports network modernization, and provides technical leadership.

Responsibilities

Administer and maintain enterprise networks, including configuring and lifecycle management of network devices such as routers, switches, firewalls, virtual private network (VPN)s, and wireless infrastructure

Perform network maintenance and system upgrades, including service packs, patches, hotfixes, and security configurations

Monitor network performance and integrity, ensuring the stability, reliability, and security of the network

Troubleshoot and resolve complex network issues in a timely manner

Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, secure sockets layer (SSL) decryption, policy optimization, and intrusion detection/prevention systems (IDS/IPS)

Develop and deploy scalable and resilient network architectures to support high availability, fault tolerance, and future growth

Engineer and support complex routing strategies using protocols such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP), ensuring optimal route redistribution, convergence, and path selection

Design, deploy, and manage hybrid network topologies, including integration with cloud environments (e.g., Microsoft Azure Virtual Networks, ExpressRoute, peering)

Support the implementation and management of Network Access Control (NAC) solutions (e.g., Cisco Identity Services Engine (ISE) for endpoint compliance and identity-based access control

Administer, monitor, and support Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and other Cisco Voice over Internet Protocol (VoIP) systems, including voice gateways, internet protocol (IP) phones, and their associated infrastructure, to ensure reliable communication services

Deploy, configure, and maintain Cisco wireless network infrastructure, including wireless Local Area Network (LAN) controllers (WLCs) and access points, to ensure seamless and secure wireless connectivity

Maintain accurate technical documentation, including topology diagrams, configuration baselines, IP address management, and change control records

Collaborate with other IT disciplines, including cloud, systems, and security teams, to deliver integrated solutions

Provide technical leadership and mentorship to junior technical staff as needed

Preferred

Bachelor's degree in engineering/science/information technology discipline with a minimum of four years of relevant experience

or a Master's degree in engineering/science/information technology discipline with a minimum of two years of relevant experience

In-depth knowledge and hands-on experience in the implementation, configuration, and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions

Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures, actively implementing and maintaining security protections across all networked devices such as switches, routers, and firewalls

Exceptional communication skills, with the ability to effectively collaborate with customers, vendors, and technical personnel across various departments and organizations

Ability to clearly and effectively present complex technical and operational information both verbally and in writing, solve intricate technical problems, and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation

Proven hands-on experience in the following areas:

Cisco Switches / Routers (configuration, troubleshooting, and maintenance)

Palo Alto Firewalls (configuration, policy management, and troubleshooting)

Cisco ASA / FirePower (implementation, and support)

Cisco VoIP (administration, monitoring, and troubleshooting of Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and related components)

Cisco ISE (implementation, and management of Network Access Control solutions for endpoint compliance and identity-based access)

Cisco Wireless (deployment, configuration, and maintenance of Cisco wireless network infrastructure, including Wireless LAN Controllers (WLCs) and access points)

Programming/scripting languages such as Perl or Python for network automation and configuration tasks

Exceptional listening skills to give focused attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times

Strong communication skills to talk to others and convey information effectively

Exceptional skills to communicate effectively in writing as appropriate for the needs of the audience

or a Master's degree in engineering/science/information technology discipline with a minimum of two years of relevant experience.

Network Infrastructure Management

Network Software Configuration

Network Hardware Configuration

Network Deployment

Network Maintenance

Network Security

Application Security

IT Vulnerability Management

Security Countermeasures

Network Documentation

Cisco Switches

Cisco Routers

Network Troubleshooting

Palo Alto Firewalls

Firewall Policy Management

Cisco ASA

Cisco Firepower

Cisco VoIP Administration

Cisco Unified Communications Manager

Cisco Unity Connection

VoIP Monitoring

Cisco Identity Services Engine

Network Access Control

Endpoint Compliance

Identity-Based Access

Cisco Wireless Infrastructure

Wireless LAN Controllers

Wireless Access Points

Perl

Python

Network Automation

Network Configuration Scripting

Technical Writing

Communication

Collaboration

Active Listening

Technical Presentation

Problem-Solving

Security Vigilance

Benefits

Flexible work options

Wellness initiatives

Comprehensive health coverage

Retirement planning

Education reimbursement

Opportunities for continuous learning and professional growth

Company

Nuclear weapons assembly, dismantlement, and maintenance facility.

Amarillo, Texas, USA

https://www.pantex.com/

Founded in 1942

1001-5000 employees

Qualifications

Bachelor's degree in engineering/science/information technology discipline

OR Master's degree in engineering/science/information technology discipline

OR applicants without a bachelor's degree may be considered based on a combination of at least 8 years of completed education and/or relevant experience

The ability to obtain and maintain a Department of Energy Q clearance is required

Bachelor's degree in engineering/science/information technology discipline with a minimum of four years of relevant experience

Or a Master's degree in engineering/science/information technology discipline with a minimum of two years of relevant experience

In-depth knowledge and hands-on experience in the implementation, configuration, and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions

Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures, actively implementing and maintaining security protections across all networked devices such as switches, routers, and firewalls

Exceptional communication skills, with the ability to effectively collaborate with customers, vendors, and technical personnel across various departments and organizations

Ability to clearly and effectively present complex technical and operational information both verbally and in writing, solve intricate technical problems, and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation

Proven hands-on experience in the following areas:

Cisco Switches / Routers (configuration, troubleshooting, and maintenance)

Palo Alto Firewalls (configuration, policy management, and troubleshooting)

Cisco ASA / FirePower (implementation, and support)

Cisco VoIP (administration, monitoring, and troubleshooting of Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and related components)

Cisco ISE (implementation, and management of Network Access Control solutions for endpoint compliance and identity-based access)

Cisco Wireless (deployment, configuration, and maintenance of Cisco wireless network infrastructure, including Wireless LAN Controllers (WLCs) and access points)

Programming/scripting languages such as Perl or Python for network automation and configuration tasks

Exceptional listening skills to give focused attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times

Strong communication skills to talk to others and convey information effectively

Exceptional skills to communicate effectively in writing as appropriate for the needs of the audience

OR applicants without a bachelor's degree may be considered based on a combination of at least 8 years of completed education and/or relevant experience.

Required skills

Network Infrastructure Management, Network Security Operations, Cisco Switches and Routers, Palo Alto Firewalls, Cisco ASA and Firepower, Cisco VoIP, Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, Cisco Identity Services Engine (ISE), Cisco Wireless Networking, Python, Perl, Q Clearance

Preferred skills

Proven hands-on experience in the following areas:, Cisco ASA / FirePower (implementation, and support)

Experience

2+ years