Saronic Classified Network Engineer at Saronic responsible for designing, implementing, and sustaining classified network infrastructure and crypto paths. This role manages L2/L3, firewalls, TACLANE configuration, and classified network integration.
Responsibilities
Design and operate classified LAN/WAN: segmentation by classification and mission enclave, IP scheme, routing, QoS, and management-plane isolation.
Configure and sustain approved Cisco / Juniper / Palo Alto (or equivalent) under DISA STIGs. Implement AAA/ISE and logging to the accredited collector.
Coordinate DISA SIPR, Navy JWICS/CWAN, and customer drops: circuit-order support, turn-up, acceptance testing, and as-builts. Produce rack elevations, cabling plans, red/black separation, IDPs, and configuration baselines.
Install, peer, firmware, and operate TACLANE-family devices (KG-175D/F/G/X, KG-250/X, related) in site and platform installations. Implement HA/failover and encryptor management per approved architecture.
Load and manage operational keying only in coordination with the appointed COMSEC Account Manager. Protect CIKs/tokens. Execute zeroize and reconstitution procedures when authorized. This billet is not the CAM/CRO unless separately appointed.
Install and maintain approved CDS hardware/software under ISSO/AO rules. Implement interfaces, NTP, logging, HA, and the filter-update process. Collect ConMon evidence. Do not independently change CDS filters, transfer rules, or accredited data flows.
Engineer network, crypto, and data-path integration of GFI/GFE payloads onto company platforms: physical install, addressing, VLANs, encryptor placement, RF/data interfaces, and cable/power constraints.
Build integration baselines (configs, versions, serials, crypto suite, ports/protocols/services) the ISSO can place in the ATO package. Support lab, factory, shipyard, and underway integration: bring-up, interoperability test, failure isolation, restore to accredited baseline.
Provide implementation evidence: diagrams, configs, STIG results, scan artifacts, PPSM, hardware inventory, and change records. Implement assigned POA&M technical mitigations on network and payload interfaces. Do not own the SSP or AO relationship.
Tier 2/3 break/fix for classified transport. Participate in change control. Support CCRI and inspection technical evidence. Travel to install, test, and turn over the classified path for both facility and product ATO deployments.
Qualification
Strong OSISTIG application on network gearAble to rackTravelPalo Alto and Cisco in the same shopUnmanned/autonomous platformShipyardPhysical Demands
Required
U.S. citizen. Active TS with SCI eligibility.
5+ years enterprise or mission network engineering; 3+ years in classified environments preferred.
Hands-on TACLANE (KG-175 / KG-250 family) configuration and operations.
