Network Engineer

Responsibilities

• Network Architecture & Design
• Routing & Switching
• MPLS & Transport Services
• Network Security
• Automation & DevOps
• Cloud & Hybrid Networking
• Network Access Control
• Operations & Incident Response
• Technical Documentation & Briefings
• Mentorship & Standards

Requirements

• BS in Computer Science, Information Technology, Network Engineering, or a related technical field, or equivalent professional experience
• 8+ years of hands-on experience designing, implementing, and operating enterprise-grade IP networks
• Deep expertise in routing protocols (BGP, OSPF, EIGRP, IS-IS) and switching technologies (STP, LACP, VTP, 802.1Q)
• Proficiency with Cisco platforms (routers, switches, ASA/Firepower firewalls); experience with additional vendors (Juniper, Palo Alto, Aruba) a plus
• Experience designing and operating secure network architectures including firewall policy, VPN technologies (IPsec, SSL), ACLs, and network segmentation
• Demonstrated experience with network automation tools and scripting (Ansible, Python, or similar); familiarity with infrastructure-as-code practices
• Experience with SD-WAN/SDN solutions and cloud networking (AWS, Azure, and/or GCP)
• Familiarity with NAC platforms (e.g., Cisco ISE, Aruba ClearPass) and endpoint access control policy enforcement
• Ability to produce clear and thorough technical documentation, network diagrams, and design presentations for both technical and non-technical audiences
• US citizenship and an active [Clearance Level] security clearance required

Desired Experience

• Active CCNP, CCIE, JNCIE, or equivalent professional network engineering certification
• Experience with MPLS transport services and inter-provider BGP peering
• Background operating satellite, wireless, or tactical communications networks in support of government or military missions
• Familiarity with voice and video over IP (VoIP/VTC) infrastructure including SIP, H.323, and QoS engineering
• Experience hardening networks to meet security standards and supporting system accreditation processes (RMF/ICD 503)
• Exposure to IPv6 design and dual-stack migration planning
• Prior experience with network forensics, packet analysis (Wireshark, tcpdump), and supporting incident response or intrusion analysis activities
• Familiarity with DISA STIGs and DoD/IC network security compliance frameworks

Benefits

Comprehensive benefits including but not limited to: healthcare, wellness, financial, retirement, education, and time off benefits.