Network Security Engineer

Pantex Plant is seeking a Network Security Engineer to support its Information Technology team and national security mission. The role focuses on designing, implementing, administering, and securing complex enterprise networks, including firewalls, routing, wireless, cloud connectivity, network access control, and VoIP systems, while supporting operations and modernization initiatives.

What you'll do:

• Administer and maintain enterprise networks, including configuring and lifecycle management of network devices such as routers, switches, firewalls, virtual private network (VPN)s, and wireless infrastructure
• Perform network maintenance and system upgrades, including service packs, patches, hotfixes, and security configurations
• Monitor network performance and integrity, ensuring the stability, reliability, and security of the network
• Troubleshoot and resolve complex network issues in a timely manner
• Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, secure sockets layer (SSL) decryption, policy optimization, and intrusion detection/prevention systems (IDS/IPS)
• Develop and deploy scalable and resilient network architectures to support high availability, fault tolerance, and future growth
• Engineer and support complex routing strategies using protocols such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP), ensuring optimal route redistribution, convergence, and path selection
• Design, deploy, and manage hybrid network topologies, including integration with cloud environments (e.g., Microsoft Azure Virtual Networks, ExpressRoute, peering)
• Support the implementation and management of Network Access Control (NAC) solutions (e.g., Cisco Identity Services Engine (ISE) for endpoint compliance and identity-based access control
• Administer, monitor, and support Cisco Unified Communications Manager (CUCM), Cisco Unity Connection, and other Cisco Voice over Internet Protocol (VoIP) systems, including voice gateways, internet protocol (IP) phones, and their associated infrastructure, to ensure reliable communication services
• Deploy, configure, and maintain Cisco wireless network infrastructure, including wireless Local Area Network (LAN) controllers (WLCs) and access points, to ensure seamless and secure wireless connectivity
• Maintain accurate technical documentation, including topology diagrams, configuration baselines, IP address management, and change control records

What they're looking for:

• * Bachelor's degree in engineering/science/information technology discipline
• * OR Master's degree in engineering/science/information technology discipline
• * OR applicants without a bachelor's degree may be considered based on a combination of at least 8 years of completed education and/or relevant experience
• The ability to obtain and maintain a Department of Energy Q clearance is required
• * Bachelor's degree in engineering/science/information technology discipline with a minimum of four years of relevant experience or a Master's degree in engineering/science/information technology discipline with a minimum of two years of relevant experience
• * Network Infrastructure Management: In-depth knowledge and hands-on experience in the implementation, configuration, and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions
• * Network Security Operations: Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures, actively implementing and maintaining security protections across all networked devices such as switches, routers, and firewalls
• * Effective Communication & Collaboration: Exceptional communication skills, with the ability to effectively collaborate with customers, vendors, and technical personnel across various departments and organizations
• * Problem Solving & Technical Documentation: Ability to clearly and effectively present complex technical and operational information both verbally and in writing, solve intricate technical problems, and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation
• + Cisco Switches / Routers (configuration, troubleshooting, and maintenance)
• + Palo Alto Firewalls (configuration, policy management, and troubleshooting)
• + Cisco ASA / FirePower (implementation, and support)

Benefits:

• Work-life balance fostered through flexible work options and wellness initiatives.
• Comprehensive health coverage.
• Robust retirement planning.
• Opportunities for continuous learning through education reimbursement.