Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.

Job Overview

We are seeking a Senior Network Engineer to design, implement, operate, and sustain classified network infrastructure and the product-side network/crypto path. This person will own L2/L3, firewalls, TACLANE configuration and operations, and CDS technical plumbing. Physically and logically integrate GFI/GFE payloads onto company platforms without breaking the accredited architecture. Produce as-built evidence the ISSO needs for facility and product ATOs. Lanes are distinct; work is expected to overlap on TACLANE, CDS, COMSEC handling, and host/network bring-up.

Responsibilities

Design and operate classified LAN/WAN: segmentation by classification and mission enclave, IP scheme, routing, QoS, and management-plane isolation.

Configure and sustain approved Cisco / Juniper / Palo Alto (or equivalent) under DISA STIGs. Implement AAA/ISE and logging to the accredited collector.

Coordinate DISA SIPR, Navy JWICS/CWAN, and customer drops: circuit-order support, turn-up, acceptance testing, and as-builts. Produce rack elevations, cabling plans, red/black separation, IDPs, and configuration baselines.

Install, peer, firmware, and operate TACLANE-family devices (KG-175D/F/G/X, KG-250/X, related) in site and platform installations. Implement HA/failover and encryptor management per approved architecture.

Load and manage operational keying only in coordination with the appointed COMSEC Account Manager. Protect CIKs/tokens. Execute zeroize and reconstitution procedures when authorized. This billet is not the CAM/CRO unless separately appointed.

Install and maintain approved CDS hardware/software under ISSO/AO rules. Implement interfaces, NTP, logging, HA, and the filter-update process. Collect ConMon evidence. Do not independently change CDS filters, transfer rules, or accredited data flows.

Engineer network, crypto, and data-path integration of GFI/GFE payloads onto company platforms: physical install, addressing, VLANs, encryptor placement, RF/data interfaces, and cable/power constraints.

Build integration baselines (configs, versions, serials, crypto suite, ports/protocols/services) the ISSO can place in the ATO package. Support lab, factory, shipyard, and underway integration: bring-up, interoperability test, failure isolation, restore to accredited baseline.

Provide implementation evidence: diagrams, configs, STIG results, scan artifacts, PPSM, hardware inventory, and change records. Implement assigned POA&M technical mitigations on network and payload interfaces. Do not own the SSP or AO relationship.

Tier 2/3 break/fix for classified transport. Participate in change control. Support CCRI and inspection technical evidence. Travel to install, test, and turn over the classified path for both facility and product ATO deployments.

Qualifications

Required

U.S. citizen. Active TS with SCI eligibility.

5+ years enterprise or mission network engineering; 3+ years in classified environments preferred.

Hands-on TACLANE (KG-175 / KG-250 family) configuration and operations.

Strong OSI, IPv4/IPv6, routing/switching, firewall, and VPN fundamentals. Confident red/black discipline.

STIG application on network gear; working familiarity with RMF evidence needs.

DoD 8140 IAT II (Security+ CE or higher). CCNA or equivalent experience; CCNP preferred.

Able to rack, cable, and lift equipment (~30 lbs). Willing to work in SCIFs, shops, and shipyard/waterfront environments.

Travel: 30–40% on short notice for circuit turn-up, inspections, and payload integration.

Preferred

JWICS/SIPR circuit experience with DISA or Navy. CANES, ADNS, or afloat/ashore Navy networks.

Palo Alto and Cisco in the same shop. ISE, DNA Center, or equivalent. CDS implementation. CSfC. Secure voice/SVTC.

Unmanned/autonomous platform, payload, or PIT integration. GDMS TACLANE operator training. COMSEC handling experience.