Network Engineer (Hybrid - Herndon, VA)

About the role

We are seeking a highly skilled Senior Network Engineer with strong technical expertise and excellent communication skills to design, implement, and support a complex, multi-site enterprise network environment. The ideal candidate will be able to effectively communicate with technical and non-technical stakeholders, drive design decisions, and document solutions clearly. This position requires rotating 24/7 on-call coverage for a full week on a shared team schedule. This position is hybrid, reporting to the Herndon, VA office, and will support a geographically distributed infrastructure spanning on-premises, Azure Commercial, and Azure GCC High (GCCH) environments, with a strong focus on security and compliance, including CMMC requirements. This position is contingent upon your ability to obtain/maintain an active Secret security clearance.

Responsibilities

• Network Architecture & Engineering
  • Design, implement, and maintain scalable, secure network architectures across multiple sites and cloud environments
  • Lead network strategy across LAN/WAN, VPN, SD-WAN, and cloud connectivity (Azure)
  • Architect and optimize Meraki and Cisco-based network infrastructures
  • Design and support Palo Alto firewalls and GlobalProtect remote access solutions
• Operations & Support
  • Provide Tier 3 support and troubleshooting for complex network issues across enterprise environments
  • Support after-hours maintenance and incident response as needed
  • Proactively monitor and improve network reliability, performance, and availability
  • Lead and contribute to incident response, root cause analysis, and service restoration efforts
• Cloud Networking
  • Design and support Azure networking components across Commercial and GCC High (GCCH) environments, including VNets, peering, routing, NSGs, VPN Gateway, and ExpressRoute
  • Ensure seamless connectivity between on-premises and cloud environments
  • Align designs with security, compliance, and boundary requirements (CMMC)
• Security & Compliance
  • Implement and maintain network security aligned with enterprise and regulatory requirements, including CMMC
  • Manage and optimize Palo Alto firewalls, security policies, and traffic inspection
  • Enforce network segmentation and access control strategies to meet compliance standards
• Documentation & Process Development
  • Develop and maintain network diagrams, architecture documentation, SOPs, and runbooks
  • Create and standardize build guides, procedures, and troubleshooting playbooks
  • Ensure adherence to change management and documentation standards
• Agile & Collaboration
  • Participate in Agile-based workflows, including sprint planning and backlog refinement
  • Collaborate with Cloud, Security, Infrastructure, and Application teams
  • Provide technical leadership and guidance to junior engineers
• Multi-Site & Vendor Coordination
  • Manage network environments across multiple domestic and international locations
  • Coordinate with vendors and service providers for circuits, hardware, and escalations
  • Support site deployments, upgrades, and migration initiatives

Requirements

• Must be eligible to obtain/maintain a Secret security clearance
• U.S. Citizenship required
• Bachelor’s degree in Computer Science, Information Technology, or related field or a Masters Degree and 6 years of experience or a High School Diploma and 12 years of experience or an Associate’s Degree and 10 years of experience
• At least 8 years of enterprise network engineering experience
• Expertise in Cisco routing & switching, Meraki cloud networking, Palo Alto firewalls and GlobalProtect, and Azure networking (Commercial and GCC High environments)
• Experience operating in regulated environments with CMMC or similar frameworks
• Proven experience managing multi-site enterprise network environments
• Strong troubleshooting, analytical, and communication skills
• Demonstrated experience producing clear technical documentation and procedures
• Ability to lift up to 50 lbs to support racking and stacking of network equipment
• Ability to work a rotating 24/7 on-call coverage for a full week on a shared team schedule
• Ability to travel up to 10% for site support and deployments

Preferred Qualifications

• Relevant certifications (CCNP/CCIE, PCNSE, Azure Network Specialty)
• Experience with hybrid cloud architectures and secure boundary implementations
• Experience with data center migrations, including planning, execution, and cutover activities
• Familiarity with automation and scripting (Python, PowerShell)
• Experience with SD-WAN implementations and optimization
• Availability to support after-hours maintenance and critical incidents as required

What Success Looks Like

• Highly available, secure, and scalable network infrastructure across all environments
• Well-documented architectures and standardized procedures
• Strong alignment with security and compliance (CMMC) requirements
• Efficient incident response and reduced operational risk
• Effective collaboration and communication across engineering teams