Job Description
Position Summary
MAG Aerospace is recruiting for a Senior Network Engineer who will Architect and manage secure, scalable enterprise network infrastructure that connects business operations across cloud and on-premises environments. You'll design robust network solutions that ensure seamless connectivity, security, and performance while supporting digital transformation initiatives and multi-tenant secure environments.
US Citizens Only
Former US Defense Contractor / US Gov / US Military Experience Only
This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested.
We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in:
Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC
Essential Duties and Responsibilities
Essential Duties and Responsibilities include the following. Other duties may be assigned.
Primary Responsibilities
- Design and implement enterprise network architectures for hybrid cloud environments
- Work with other IT cross-functional teams for collaboration where networkoperations could be impacted
- Configure and manage Microsoft Azure networking services (VNets, ExpressRoute, VPN Gateway, Network Security Groups)
- Deploy and maintain Fortinet security appliances (FortiGate firewalls, FortiAnalyzer, FortiManager)
- Configure and optimize Cisco enterprise networking equipment (switches, routers, wireless controllers)
- Implement network segmentation and microsegmentation strategies for secure multi-tenant environments
- Design and deploy software-defined WAN (SD-WAN) solutions
- Configure quality of service (QoS) for business-critical applications
- Develop network monitoring and performance optimization strategies
Secondary Responsibilities
- Implement zero-trust network security architectures
- Design and configure network access control (NAC) solutions
- Perform network security assessments and vulnerability remediation
- Implement advanced threat protection and intrusion prevention systems
- Support compliance requirements (SOX, PCI-DSS, HIPAA, SOC 2)
- Manage network automation and infrastructure-as-code initiatives
- Provide escalation support for complex network issues
- Implement network security controls (encryption, authentication, segmentation)
- Design and configure firewall rules and intrusion detection
- Perform network vulnerability assessments
- Implement zero-trust network architectures
- Support cybersecurity compliance requirements
Requirements
- 7+ years of progressive experience in enterprise network engineering
- Advanced Knowledge of routing, switching, and network protocols (BGP, OSPF, EIGRP, STP, VLANs, QoS, etc.)
- Hands-on experience with Microsoft Azure networking (Virtual Networks, Load Balancers, Application Gateway, Microsoft Entra ID)
- Hands-on experience with enterprise firewalls and security appliances (Fortinet, Cisco ASA/FTD, Palo Alto,etc.)
- Experience with FortiGate SD-WAN implementation
- Experience with Cisco Identity Service Engine (ISE)
- Experience troubleshooting network security protocols (IPSec, SSL/TLS, 802.1X)
Preferred Qualifications
- Bachelor's degree in Computer Science, Information Technology, or related field
- Experience with Cisco enterprise equipment (Catalyst switches, ISR/ASR routers, Wireless LAN Controllers)
- Experience with network automation tools (Ansible, Terraform, Python scripting)
- Understanding of container networking (Kubernetes, Docker)
- Experience with SD-WAN solutions (Cisco Viptela, Silver Peak, VeloCloud)
- Familiarity with network monitoring tools (FortiManager, PRTG, Nagios)
- Experience with secure remote access solutions (VPN, ZTNA)
- CCNA/CCNP, Azure certifications, or Fortinet NSE certifications
Clearance:
- Must be eligible for Secret Security Clearance
- US Citizenship required
Special Note
The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.
