I would ask why the contractor needs access to the network.

That the pentagon did not do that from the start smells of security principles that have not been correctly applied.

Access granted should be limited and specific only for the reason required.