Responsibilities
- Deploy, configure, and sustain GigaVUE HC-3, T-10, and HD-Series packet brokers; design TAP/SPAN architectures for full traffic visibility across classified and unclassified DIA network segments
- Administer GigaVUE Fabric Manager (GFM) for policy management, traffic mapping, and tool load balancing; configure GigaSMART features including deduplication, slicing, masking, and application filtering
- Integrate Gigamon outputs with DIA-operated SIEM, IDS/IPS, and full-packet capture platforms; ensure all deployments comply with RMF, ICD 503, and applicable DISA STIGs
- Deliver enriched traffic feeds to DIA analytics platforms supporting threat hunting, anomaly detection, and APT/insider threat identification; assess and remediate sensor coverage gaps
- Support SOC analysts and ISSM/ISSO personnel during incident response with packet-level data and flow analysis across SIPRNET, JWICS, and coalition network segments
- Architect and document Gigamon sensor grid topologies for evolving DIA segments including cross-domain and coalition environments; lead design reviews, ECPs, and as-built documentation
- Develop SOPs and runbooks; brief findings and risk assessments to DIA government leads; mentor junior engineers on platform operations and IC cybersecurity practices
Requirements
- 5-7 years of hands-on experience in network engineering, network security engineering, or a closely related discipline within a DoD or IC environment
- Demonstrated experience deploying and operating Gigamon appliances (GigaVUE HC, T-Series, HD-Series, or equivalent) in production networks
- Experience designing and troubleshooting IP networks including routing protocols (BGP, OSPF), VLANs, spanning tree, and network segmentation
- Experience supporting or operating within DoD or IC classified computing environments including SIPRNET, JWICS, or equivalent enclaves
- Experience documenting network topologies and maintaining as-built diagrams and configuration baselines
- Proficiency with GigaVUE Fabric Manager (GFM) and Gigamon CLI for appliance configuration and policy management
- Knowledge of packet capture and traffic analysis concepts including TAP/SPAN, deduplication, filtering, and flow metadata
- Understanding of network security principles including firewalls, IDS/IPS, proxies, and zero-trust architecture as applied to classified environments
- Familiarity with SIEM platforms (Splunk, ArcSight, or equivalent) and how network visibility feeds enhance detection fidelity
- Working knowledge of multi-domain architectures: LAN, WAN, data center, and virtualized/SDN environments
- DoD 8570 IAT Level II certification — one or more of the following required: CompTIA Security+ CE, GIAC Security Essentials (GSEC), Cisco CyberOps Associate / CCNA Security, CySA+, CND, or SSCP
- DoD 8570 CSSP Infrastructure Support certification — must be obtained prior to start date: Certified Ethical Hacker (CEH), CompTIA CySA+, CND, or Cloud+, GIAC GICSP or SSCP, CHFI or CFR
- Active Top Secret / SCI clearance with a current Counterintelligence (CI) Polygraph — required at time of hire; no exceptions
- HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience with supporting IT projects and activities, or Bachelor’s degree and 3+ years of experience with supporting IT projects and activities
Nice to Have
- Gigamon Certified Engineer (GCE) or equivalent Gigamon product certification
- Experience supporting DIA, NSA, or other IC agency network operations in a contractor or government role
- Experience with DISA STIG implementation and RMF package development for network devices
- Familiarity with full-packet capture platforms (NetScout, Solera, Moloch/Arkime) integrated with Gigamon feeds
- Linux OS administration experience (RHEL, CentOS) in support of network security tooling
- Experience with SolarWinds NPM/IPAM or similar network management and IP address management platforms
- Experience operating within ICD 503, CNSSI 1253, or DIA-specific cybersecurity policy frameworks
- Familiarity with virtualized network environments including VMware NSX, Hyper-V, or cloud-based visibility tools
- Strong written and verbal communication skills with demonstrated ability to brief technical findings to senior government personnel
- Self-directed work ethic with the ability to manage competing priorities in a high-tempo, mission-critical environment
