Systems Network Engineer II
Role Overview
PMAT is seeking a Systems Network Engineer II to support the design, configuration, integration, and sustainment of secure network infrastructure across distributed computing, cloud, and software environments.
This mid-level role will work across on-premises lab and test environments, cloud infrastructure, and distributed platforms to maintain reliable and secure connectivity.
The candidate will collaborate with network engineers, cloud and platform teams, cybersecurity personnel, software developers, and other technical stakeholders to troubleshoot network issues, maintain network documentation, implement access controls, and support evolving infrastructure capabilities.
The ideal candidate possesses strong foundational networking skills, hands-on troubleshooting experience, and an interest in expanding their expertise across cloud networking, containerized environments, network automation, and modern infrastructure technologies.
Key Skills for This Role
Full Job Posting
Responsibilities
- Configure, maintain, and troubleshoot Layer 2 and Layer 3 network infrastructure supporting on-premises, laboratory, test, cloud, and distributed computing environments.
- Support network connectivity by integrating compute nodes, network infrastructure, and cloud or on-premises backend services.
- Develop and maintain network topology diagrams, data-flow documentation, configuration records, interface information, and other technical artifacts documenting system connectivity and network dependencies.
- Configure and maintain network security controls, including Access Control Lists (ACLs), firewall policies, traffic filtering rules, ports and protocols, and network segmentation to support least-privilege access.
- Deploy, monitor, troubleshoot, and maintain secure remote and site-to-site connectivity using IPsec, SSL/client-based VPNs, and other approved communications technologies.
- Monitor network health, availability, throughput, packet loss, and latency using network monitoring and diagnostic technologies while troubleshooting L2/L3 issues affecting applications and infrastructure.
- Support provisioning and configuration of cloud networking components, including VPCs/VNets, subnets, route tables, peering connections, security controls, and private endpoints used to connect cloud services with enterprise and distributed computing environments.
- Support network security hardening, configuration reviews, vulnerability remediation, port and protocol reviews, and implementation of applicable cybersecurity requirements and technical security baselines.
- Collaborate with senior network engineers, cloud and platform teams, cybersecurity personnel, software developers, and infrastructure engineers to resolve complex connectivity issues and support integration, testing, deployment, and sustainment activities.
Required Skills and Experience
- Strong foundational experience in network engineering, network administration, systems networking, infrastructure engineering, or related technical roles.
- Experience configuring, maintaining, and troubleshooting Layer 2 and Layer 3 networks, including switching, routing, VLANs, subnets, and network segmentation.
- Understanding of core networking concepts and protocols, including TCP/IP, DNS, DHCP, routing, ports and protocols, and network addressing.
- Experience configuring or supporting firewalls, ACLs, VPNs, traffic filtering, network access controls, or other network security technologies.
- Experience troubleshooting network connectivity, performance, latency, routing, and configuration issues using network monitoring and diagnostic tools.
- Experience developing or maintaining network diagrams, topology documentation, configuration records, data-flow diagrams, or other network engineering documentation.
- Understanding of cybersecurity principles, network hardening, least-privilege access, vulnerability remediation, and secure network configuration practices.
- Strong analytical and problem-solving skills with the ability to troubleshoot technical issues across networks, systems, applications, and infrastructure.
- Strong written and verbal communication skills with the ability to collaborate effectively with network, cloud, cybersecurity, software, infrastructure, and engineering teams.
Preferred Skills and Experience
- Experience supporting distributed computing, edge computing, robotics, or other complex technology environments.
- Familiarity with AWS, Azure, GCP, or similar cloud platforms and networking constructs such as VPCs/VNets, subnets, route tables, peering, private endpoints, gateways, and cloud security controls.
- Familiarity with enterprise network monitoring and diagnostic technologies such as SNMP, NetFlow/sFlow, Wireshark, packet analyzers, or similar tools.
- Familiarity with Kubernetes and container networking concepts, including Container Network Interfaces (CNIs), Pod-to-Pod communication, Services, Ingress controllers, and containerized microservice connectivity.
- Familiarity with network or infrastructure automation using Terraform, Ansible, Python, Bash, or similar automation and Infrastructure as Code technologies.
- Familiarity with Zero Trust architectures, network segmentation, identity-aware networking, or other modern network security approaches.
- Familiarity with CIS Benchmarks, NIST guidance, STIGs, or other security baselines applicable to network infrastructure.
- Experience supporting hybrid environments connecting on-premises infrastructure, cloud services, distributed computing platforms, and geographically distributed systems.
- Experience supporting regulated, security-sensitive, or other mission-critical network environments.
- Demonstrated ability and interest in expanding technical expertise across cloud infrastructure, container networking, automation, and emerging network technologies.
- Education and Certification Requirements:
- Bachelor’s Degree or Equivalent Experience
- Current Security+ Certificate Preferred
- Citizenship and Clearance Requirements:
- U.S. Citizenship required
- No dual citizenship
- TS/SCI eligible; security clearance required
- Location/Address:
- 100% On-site
- San Diego, CA
- Travel & Passport: 5%, CONUS and OCONUS
- Work Environment: PMAT offices as needed. In some cases, work in a government facility may be required. Travel may be required for customer engagement, team coordination, and potentially for business development.
- PMAT is an equal-opportunity employer. We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture. We are committed to non-discrimination on any protected basis, such as disability and veteran status, or any other basis covered by applicable law.
About PMAT
Defense technology company delivering software, data science, systems engineering, and digital engineering solutions to U.S. government clients.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at PMAT
Software Systems Integration SME
San Diego, USA
DoD Skillbridge Intern
, USA
Maritime Operations Center (MOC) SME
San Diego, USA
Cloud Engineer III
San Diego, USA
Computer Engineer
San Diego, USA
Systems Engineer – Level II
San Diego, USA
System Administrator Expeditionary Systems (OpAI) - Secret Clearance Required
San Diego, USA
Senior Software Engineer Expeditionary Systems (OpAI) - Secret Clearance Required
San Diego, USA