About the Mission
The Persistent Cyber Training Environment (PCTE) supports United States Cyber Command (USCYBERCOM) by meeting a critical need for the DoD and Joint Cyberspace Operations Forces to train at the individual, team, and force level. PCTE is an online platform that gives Cybercom’s cyber mission force access from anywhere in the world for individual training, collective training, and mission rehearsal. It is one of the five elements of the Joint Cyber Warfighting Architecture (JCWA) and is managed on behalf of Cybercom and the joint cyber force by the Army’s Program Executive Office for Simulation, Training and Instrumentation.
The program has matured well past initial fielding. The infrastructure team now sustains a fleet of enterprise environments in parallel — development, test, and multiple production systems — while simultaneously standing up new environments, executing platform-wide version upgrades, replacing hardware in place, and integrating a growing catalog of mission applications. This role sits at the center of that work.
Position Summary
The Mid Level Network Engineer owns the network layer — physical and virtual — across the PCTE enterprise fleet. This is not a ticket-queue or single-domain networking job. The successful candidate designs and implements routing, switching, load balancing, and micro-segmentation across a hyperconverged VMware Cloud Foundation environment; hardens that infrastructure to DISA STIG and RMF standards; racks and cables the gear personally; plans and executes hardware migrations and maintenance windows against real delivery dates; integrates mission applications end-to-end across system boundaries; and serves as the technical authority other teams come to when connectivity, segmentation, or system integration is the blocker.
Job Duties
Network Design, Implementation, and Operations
- Design, configure, and troubleshoot Layer 2 and Layer 3 infrastructure across Cisco Nexus (NX-OS) and Catalyst platforms in spine/leaf data center fabrics — VLANs, port-channels, vPC, trunking, BGP peering and advertisement, prefix-lists, route-maps, VRFs, and access-lists.
- Build and maintain F5 BIG-IP configurations including virtual servers, pools, nodes, health monitors, HTTP/SSL profiles, certificate management, firewall rules, and WAF policies supporting externally reachable mission services.
- Design and implement VMware NSX networking and security — Tier-0/Tier-1 gateways, overlay and VLAN segments, distributed firewall (DFW) rules, context profiles, and route advertisement — and reconcile NSX policy with physical switch ACLs and F5 rules so traffic actually flows end to end.
- Own the full connectivity path for new services: trace and resolve issues across NSX, F5, physical switching, DNS, and endpoint configuration rather than handing off at a domain boundary.
- Execute OS upgrades and baseline patching across the fleet for Nexus switches, Catalyst switches, F5 BIG-IP, and Cisco ISE, coordinated within approved change windows.
Data Center and Hardware Engineering
- Rack, cable, and bring up new compute, storage, and network racks — including iDRAC/BMC configuration, ESXi installation, and integration of new hardware into existing VCF workload domains.
- Plan and execute physical infrastructure changes: hardware refresh and vendor migrations, rack deliveries, data center relocations (system shutdown, physical move, reinstallation, recabling, power-up, and functional validation), and post-power-event health checks.
- Coordinate the non-technical half of these efforts — data center access requests, shipping and logistics scheduling, change approval, and maintenance window negotiation with government stakeholders.
- Design and rehearse migrations in a lab or non-fielded system before touching production, with the objective of zero or near-zero service interruption, and brief the plan and findings to project leads before execution.
Virtualization and Platform Integration
- Support VMware Cloud Foundation (VCF) lifecycle work — major-version upgrades, SDDC Manager operations, workload domain creation, and post-deployment network configuration — across development, test, and production environments.
- Deploy and configure infrastructure management and observability platforms such as VMware Aria Operations (SNMP configuration, vendor management packs, accounts and targets) and Cisco Nexus Dashboard / NDFC (multi-node clustering, fabric creation, device onboarding).
- Deliver the network configuration required to integrate mission and enterprise applications — identity and SSO (Red Hat build of Keycloak), container registries, source control, patch and repository services, virtual desktop/agent services, monitoring stacks, and ITSM/collaboration tooling — including cross-system and external connectivity.
- Configure storage and replication networking, including cross-platform caching and replication between enterprise systems.
Cybersecurity, Compliance, and Standards
- Generate, review, and remediate DISA STIG checklists for network devices, F5, Cisco ISE, and VMware components; author defensible mitigation statements with supporting evidence where a finding cannot be remediated due to system requirements.
- Configure infrastructure to support and unblock ACAS/Nessus vulnerability scanning, and resolve scan failures caused by network or ACL conditions.
- Prepare and submit change and approval packages through the program’s configuration control process (CCB and equivalent boards) for new external connections and applications.
- Develop and maintain program-level Quality Assurance standards — standardized checklists used to verify configuration, hardening, and readiness of every networking component prior to system release — then run those checks against systems approaching delivery and drive remediation to closure.
Automation and Documentation
- Use Ansible and scripting to deploy configurations at scale, apply STIG remediations, and support automated post-deployment network buildout.
- Document designs, migration plans, test results, and as-built configurations to a standard that another engineer can execute from.
Leadership and Collaboration
- Mentor and train junior network engineers and build-team members on the environment, the toolset (Cisco, F5, NSX), and program procedures.
- Act as the networking point of contact for platform, build, cyber, and application teams; translate their requirements into implementable network and security policy.
- Brief technical plans, risks, and recommendations to project leads and government customers, and work directly with vendors on escalations and support cases.
REQUIRED QUALIFICATIONS
- U.S. citizenship.
- Active DoD Secret clearance (must be current at time of application).
- Bachelor’s degree in a technical discipline (IT, computer science, cybersecurity, or engineering). Four additional years of directly relevant experience may substitute for the degree.
- 6+ years of hands-on enterprise network engineering experience, including at least 3 years in a data center or hyperconverged environment.
- DoD 8570/8140 IAT Level II certification or higher (Security+, CCNA Security, CASP+, CISSP, or equivalent) — required at start date.
- Demonstrated expertise with Cisco routing and switching, including NX-OS in a data center fabric: BGP, VLANs, port-channels, vPC, ACLs, prefix-lists, and route-maps.
- Hands-on experience administering F5 BIG-IP (LTM at minimum): virtual servers, pools, health monitors, profiles, and certificate management.
- Working experience with VMware virtualization — vCenter and ESXi at minimum — and a practical understanding of how virtual networking interacts with physical infrastructure.
- Linux experience (Red Hat Enterprise Linux preferred), including comfort at the command line for configuration, troubleshooting, and data collection.
- Experience applying and auditing DISA STIGs and operating within DoD 8510 RMF requirements.
- Willingness and physical ability to perform hands-on data center work — racking, cabling, and equipment handling — and to support scheduled maintenance windows that may fall outside normal business hours or across consecutive days.
- Proven ability to own a project end to end: scope it, test it, document it, brief it, and execute it on a schedule.
DESIRED QUALIFICATIONS
- Active DoD Top Secret clearance.
- 8+ years of relevant experience, or prior experience as a technical lead on a DoD infrastructure program.
- VMware NSX design and administration (T0/T1, segments, DFW, context profiles).
- VMware Cloud Foundation (VCF) and SDDC Manager experience, particularly major-version upgrade execution.
- Cisco Identity Services Engine (ISE) and 802.1X network access control.
- Cisco Nexus Dashboard / NDFC, or comparable fabric management tooling.
- VMware Aria Operations, VMware Cloud Director, or comparable infrastructure observability and multi-tenancy platforms.
- Ansible for network configuration management and automated remediation.
- Kubernetes and container platform networking.
- NetApp storage networking, including cross-site caching or replication.
- Certifications such as CCNP (Enterprise or Data Center), F5 Certified Administrator/Technology Specialist, VMware VCP-NV or VCP-DCV.
- Cyber range operations experience, or prior work on PCTE, JCWA, or a comparable DoD training/simulation platform.
- Experience mentoring junior engineers or authoring technical standards and checklists adopted by a broader team.
BENEFITS
We offer 50% paid employee premium health care including medical, dental, and vision, as well as employee-paid spouse, child, or family medical insurance; employer-paid life insurance; AD&D; short-term disability; and employee-paid voluntary life insurance. We also offer 3% 401(k) plan matching, paid holidays, and prorated PTO. Employees are eligible for tuition reimbursement and referral incentives.
ABOUT BIZZELL
Engaged Leadership. Founded by veterans, our executive leadership team brings decades of experience as senior government officials and a broad, relevant range of expertise in DoD and civilian agency operations — both here and abroad. Our leaders foster high-performing teams that collaborate across the company with clarity and trust.
Foundation of Integrity. Our commitment to integrity defines us and is the bedrock of our reputation. It is a consistent commitment in everything we do — unchanging and unwavering. We are accountable to lead by example and uphold the highest standards of integrity.
Pursuit of Excellence. We take pride in building a company on the pursuit of excellence and making that our calling card. We dedicate ourselves to excellence in contract fulfillment and mission requirements, delivering high-quality services while seeking ongoing improvement.
Passion with a Purpose. We are strategic in our staff selection process, bringing on team members selected not only for technical expertise and relevant experience, but for genuine passion in their work — a driven focus on the mission of our customers, consistently exceeding their expectations.
Bizzell Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
Pay: From $105,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Life insurance
- Paid time off
- Tuition reimbursement
- Vision insurance
Application Question(s):
- How many years of Linux Experience do you have?
Experience:
- Network engineering: 4 years (Required)
Security clearance:
Ability to Commute:
- Orlando, FL 32826 (Required)
Work Location: In person
