Senior Network Administrator

• IT IS A 100 % onsite position
  
• Employment Type: Full-Time (Up to 40 hours/week, no overtime permitted)
  
• Clearance: Active Tier 5 (T5) Top Secret security clearance
  
• Transportation: Must possess a personal vehicle (POV) for commuting between local base sites in Guam (expenses/mileage are non-reimbursable)

POSITION OVERVIEW

• Configure, maintain, and manage ruggedized network hardware (e.g., Cisco Industrial Ethernet, Allen-Bradley Stratix, Ruggedcom, Palo Alto, Data Diodes, and enterprise hardware).
  
• Manage resilient network topologies (e.g., Resilient Ethernet Protocol [REP], Device Level Ring [DLR]) to ensure rapid failover and deterministic traffic flow for time-sensitive control processes.
  
• Maintain backup for all switch, router, and firewall configurations.
  

• Implement and manage strict network segmentation and micro-segmentation aligned with the Purdue Enterprise Reference Architecture (PERA).
  
• Enforce Ports, Protocols, and Services Management (PPSM) across the IT/OT boundary, permitting only authorized automation protocols (e.g., BACnet IP, LonWorks, Modbus TCP, Fox Protocol, DNP3, CIP).
  
• Configure and manage OT Next-Generation Firewalls (NGFW) and Unidirectional Gateways (Data Diodes).
  
• Apply and maintain network-specific Security Technical Implementation Guides (STIGs) using "OT-safe" methodologies to prevent physical process disruptions or equipment shutdowns.
  

• Act as the primary escalation point for network issues and resolve.
  
• Perform root-cause analysis on connectivity drops using advanced protocol analyzers (e.g., Wireshark) tailored to industrial/building automation protocols.
  

• Develop, validate, and maintain Risk Management Framework (RMF) artifacts for Platform IT (PIT) and FRCS, including topology diagrams, hardware/software baselines, PPSM, and Plan of Action and Milestones (POA&M) updates.
  
• Conduct MILCON (Military Construction) and SRM project design reviews. Evaluate contractor architectural proposals, Bills of Materials (BOM), and compliance with command OT standards.
  
• Provide SME oversight during integration, testing, and cybersecurity commissioning (CyCx) prior to final project handover.
  

Requirements

SKILL SETS & REQUIRED QUALIFICATIONS: 

• General Network Administration: Minimum 5 years of advanced network administration experience.
  
• OT/ICS Focus: Minimum 3 years of hands-on experience explicitly focused on ICS, SCADA, BMS, FRCS, or specialized IT/OT network environments.
  

• Deep technical knowledge of strict network segmentation, firewall ruleset development, and industrial protocol routing (BACnet/IP, Modbus TCP, DNP3, CIP, etc.).
  
• Strong practical application of NIST SP 800-82 standards, Purdue Model implementation, DoD cybersecurity mandates, and passive/OT-safe monitoring tools.
  

• Must hold and maintain at least one (1) active commercial certification satisfying DoDM 8140.03 WRC 441 Foundational Qualification prior to onboarding:
  
• Intermediate Level (Minimum): Security+, CEH, Cloud+, GCIH, GICSP, GSEC, or SSCP.
  
• Advanced Level (Automatically Qualifies): SecurityX (CASP+), CCNA, CCNP Security, CCSP, GCED, GCIA, GCLD, GDSA, GFACT.
  
• Note: Must complete a minimum of 20 hours annually of Continuous Professional Development (CPD) or certification-mandated renewal requirements.
  

• Cisco CCNA / CCNP
  
• Cisco Managing Industrial Networks with Cisco Networking Technologies (IMINS)
  
• Palo Alto PCNSA / PCNSE
  
• Juniper JNCIA / JNCIS

• Software: Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).
  
• Communication: Fluent written and spoken English; ability to write technical reports, standard operating procedures (SOPs), root-cause analysis reports, and interact professionally with senior civilian, military, and contractor stakeholders.
  

• Ability to perform physical tasks common to mechanical rooms and rough facility settings:
  
• Extended periods of standing and walking over rough, uneven, or rocky surfaces.
  
• Recurring bending, stooping, crouching, reaching, and ladder climbing.
  
•  Ability to lift and carry IT/OT equipment up to 25 lbs.
  
•  Adequate vision to identify physical and safety hazards.
  

• Safety-First Operational Approach: Standard IT troubleshooting methodologies (e.g., aggressive ping sweeps, active port scanning) can lock up or shut down critical facility systems (chillers, logic controllers, life-safety sensors). All actions must be passive or explicitly validated as "OT-safe" prior to execution.
  
• Information Security: Must strictly safeguard Controlled Unclassified Information (CUI), IP schemas, topology diagrams, CUI/Privacy Act data, and facility configurations.
  
• Email & Professionalism: Must perform duties independently under contractor management oversight using official @us.navy.mil (or authorized government) email accounts, with company identification clearly denoted in all communications.