• 
  IT IS A 100 % onsite position
• 
  Employment Type: Full-Time (Up to 40 hours/week, no overtime permitted)
• 
  Clearance: Active Tier 5 (T5) Top Secret security clearance
• 
  Must be a United States citizen.
• 
  Transportation: Must possess a personal vehicle (POV) for commuting between local base sites in Guam (expenses/mileage are non-reimbursable)

POSITION
OVERVIEW

• 
  Configure, maintain, and manage ruggedized network hardware (e.g., Cisco Industrial Ethernet, Allen-Bradley Stratix, Ruggedcom, Palo Alto, Data Diodes, and enterprise hardware).
• 
  Manage resilient network topologies (e.g., Resilient Ethernet Protocol [REP], Device Level Ring [DLR]) to ensure rapid failover and deterministic traffic flow for time-sensitive control processes.
• 
  Maintain backup for all switch, router, and firewall configurations.

• 
  Implement and manage strict network segmentation and micro-segmentation aligned with the Purdue Enterprise Reference Architecture (PERA).
• 
  Enforce Ports, Protocols, and Services Management (PPSM) across the IT/OT boundary, permitting only authorized automation protocols (e.g., BACnet IP, LonWorks, Modbus TCP, Fox Protocol, DNP3, CIP).
• 
  Configure and manage OT Next-Generation Firewalls (NGFW) and Unidirectional Gateways (Data Diodes).
• 
  Apply and maintain network-specific Security Technical Implementation Guides (STIGs) using "OT-safe" methodologies to prevent physical process disruptions or equipment shutdowns.

• 
  Act as the primary escalation point for network issues and resolve.
• 
  Perform root-cause analysis on connectivity drops using advanced protocol analyzers (e.g., Wireshark) tailored to industrial/building automation protocols.

• 
  Develop, validate, and maintain Risk Management Framework (RMF) artifacts for Platform IT (PIT) and FRCS, including topology diagrams, hardware/software baselines, PPSM, and Plan of Action and Milestones (POA&M) updates.
• 
  Conduct MILCON (Military Construction) and SRM project design reviews. Evaluate contractor architectural proposals, Bills of Materials (BOM), and compliance with command OT standards.
• 
  Provide SME oversight during integration, testing, and cybersecurity commissioning (CyCx) prior to final project handover.

Requirements

SKILL
SETS & REQUIRED QUALIFICATIONS :

• 
  General Network Administration
  : Minimum 5 years of advanced network administration experience.
• 
  OT/ICS Focus
  : Minimum 3 years of hands-on experience explicitly focused on ICS, SCADA, BMS, FRCS, or specialized IT/OT network environments.

• 
  Deep technical knowledge of strict network segmentation, firewall ruleset development, and industrial protocol routing (BACnet/IP, Modbus TCP, DNP3, CIP, etc.).
• 
  Strong practical application of NIST SP 800-82 standards, Purdue Model implementation, DoD cybersecurity mandates, and passive/OT-safe monitoring tools.

• 
  Must hold and maintain at least one (1) active commercial certification
  satisfying DoDM 8140.03 WRC 441 Foundational Qualification prior to onboarding:
• 
  Intermediate Level (Minimum): Security+, CEH, Cloud+, GCIH, GICSP, GSEC, or SSCP.
• 
  Advanced Level (Automatically Qualifies): SecurityX (CASP+), CCNA, CCNP Security, CCSP, GCED, GCIA, GCLD, GDSA, GFACT.
• 
  Note: Must complete a minimum of 20 hours annually of Continuous Professional Development (CPD) or certification-mandated renewal requirements.

• 
  Cisco CCNA / CCNP
• 
  Cisco Managing Industrial Networks with Cisco Networking Technologies (IMINS)
• 
  Palo Alto PCNSA / PCNSE
• 
  Juniper JNCIA / JNCIS

• 
  Software:
  Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).
• 
  Communication
  : Fluent written and spoken English; ability to write technical reports, standard operating procedures (SOPs), root-cause analysis reports, and interact professionally with senior civilian, military, and contractor stakeholders.

• 
  Ability to perform physical tasks common to mechanical rooms and rough facility settings:
• 
  Extended periods of standing and walking over rough, uneven, or rocky surfaces.
• 
  Recurring bending, stooping, crouching, reaching, and ladder climbing.
• 
  Ability to lift and carry IT/OT equipment up to 25 lbs.
• 
  Adequate vision to identify physical and safety hazards.

• 
  Safety-First Operational Approach:
  Standard IT troubleshooting methodologies (e.g., aggressive ping sweeps, active port scanning) can lock up or shut down critical facility systems (chillers, logic controllers, life-safety sensors). All actions must be passive or explicitly validated as "OT-safe" prior to execution.
• 
  Information Security:
  Must strictly safeguard Controlled Unclassified Information (CUI), IP schemas, topology diagrams, CUI/Privacy Act data, and facility configurations.
• 
  Email & Professionalism:
  Must perform duties independently under contractor management oversight using official @us.navy.mil (or authorized government) email accounts, with company identification clearly denoted in all communications.