Principal Network Engineer – Routing and Switching

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Engineer specializing in Routing and Switching to serve as the senior technical authority for a large-scale enterprise network supporting a Department of Defense environment. This role is responsible for advancing network innovation through strategic design, modernization, and implementation efforts that improve network security, scalability, resiliency, and performance. The successful candidate will provide architectural leadership across core, distribution, access, WAN, and data center environments while defining enterprise standards for routing, switching, segmentation, resiliency, and network modernization initiatives. This individual will serve as the final technical escalation point for complex networking challenges and will provide oversight and direction to engineering teams executing enterprise network initiatives. This role requires deep technical expertise, strong leadership skills, and the ability to communicate complex architectural decisions and implementation strategies to government stakeholders, technical leadership, and approval boards. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What’s in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package:Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designsDefine routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing environmentsDevelop addressing strategies, route filtering and summarization standards, redistribution boundaries, convergence targets, and path-selection policiesDefine Layer 2 and high-availability architectures, including VLAN strategy, spanning-tree design, link aggregation, VRFs, multicast, segmentation, redundancy models, and QoS policiesEvaluate current network architectures and identify opportunities to improve performance, scalability, resiliency, and operational efficiencyEstablish and enforce network design standards, configuration baselines, and architectural patterns Project Execution Lead network engineering projects from planning through implementationPerform architecture reviews, requirements analysis, dependency identification, implementation planning, execution oversight, validation, and operational transition activitiesDevelop implementation plans, schedules, cutover procedures, rollback plans, contingency procedures, and validation methodologiesLead network modernization initiatives involving segmentation, IPv4/IPv6 transition, network optimization, lifecycle replacement, connectivity consolidation, automation, and software-defined networking adoptionCoordinate maintenance windows, testing events, deployment activities, and rollback execution for mission-critical network changesCollaborate with network architects, cybersecurity teams, operations personnel, project managers, and technical subject matter experts to deliver complex infrastructure initiatives Technical Leadership Serve as the final escalation point for complex routing, switching, transport, convergence, and network performance issuesProvide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analystsReview engineering designs and implementation activities to ensure technical quality and architectural complianceManage competing priorities and concurrent engineering efforts while maintaining accountability for successful deliveryImprove engineering processes, implementation playbooks, runbooks, technical standards, documentation practices, and operational transition procedures Documentation Develop and maintain logical and physical network architecture diagramsCreate routing standards, policy documentation, address plans, and configuration baselinesDevelop implementation plans, testing procedures, validation criteria, and rollback documentationMaintain risk assessments, decision registers, dependency tracking documents, technical standards, and runbooksProduce as-built documentation and operational transition packages What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experienceSpecific experience, education, and training may be considered in lieu of a degreeActive DoD Secret security clearanceCurrent DoD 8140/8570 IAT Level II certification or higherSignificant experience designing and implementing network security architecture in complex, large-scale enterprise environmentsExperience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teamsExperience leading security engineering projects from planning through implementationHands-on engineering experience with:Next-generation firewallsIntrusion detection and prevention systemsProxies and TLS inspection solutionsVPN and encryption servicesNetwork access control platformsExperience with network segmentation and secure connectivity initiativesExperience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planningStrong knowledge of:TCP/IPRouting protocolsSwitchingVLANsDNS/DHCP/IPAMNATQoSSoftware-defined networkingCloud-connected environmentsHands-on experience with two or more of the following technologies:Palo AltoCiscoArubaDellInfobloxBrocadeWorking knowledge of:NISTFedRAMPFISMARMFDISA STIGsDoD cybersecurity requirementsDemonstrated ability to manage competing priorities and deliver complex technical initiativesExperience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar toolsExcellent written and verbal communication skillsExperience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boardsExperience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platformsExperience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platformsExperience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deploymentsStrong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issuesStrong written and verbal communication skillsExperience providing technical guidance and developing engineering documentationMust meet applicable cybersecurity workforce qualification requirements for the assigned position. How you will wow us: Cisco Certified Network Professional (CCNP) Enterprise, CCIE, or equivalent certificationExperience leading enterprise network innovation initiatives, including:Network segmentationEnterprise Wi-Fi modernizationIPv6 transitionNetwork automationSoftware-defined networkingCloud connectivityZero-trust-aligned networkingSecurity-stack modernizationExperience with SD-WAN, SD-Access, Cisco Catalyst Center (DNA Center), or similar controller-based networking architecturesExperience with network automation and infrastructure-as-code using Python, Ansible, REST APIs, or similar technologiesExperience integrating enterprise networking with cloud infrastructure, including hybrid connectivity, cloud routing, and secure interconnectsExperience developing repeatable engineering frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction methodologiesExperience using Jira, Confluence, or similar collaboration and knowledge-management toolsUnderstanding of federal cybersecurity and compliance frameworks, including:NISTFedRAMPFISMARMFDoD cybersecurity requirements JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. JCS is both a Great Place to Work and a Top Places to Work certified company. Our employees embody our core values, and we are looking for others who do too! Customer Experience: Strive for excellence and delight our clients Innovation: Embrace creative thinking to enable continual growth and powerful solutions Accountability: Take ownership of and pride in our actions and service delivery Inspire: Be inspired to be your best self and have fun in the process Integrity: Do the right thing, the right way, every time! Stewardship: The careful and responsible management of something entrusted to our care. At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00 Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app. Powered by JazzHR XHdmY0Yjl6