SME Network Engineer

About the role

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Responsibilities

• Design, document, and maintain network architecture, including: Layer 2/Layer 3 topology, IP address schema and subnetting, VLAN/VRF segmentation, routing design (OSPF, BGP, EIGRP, static routing), firewall zoning, NAT policies, and security segmentation, VPN tunnels, encrypted transport paths, and PKI integrations, COOP/DR network routing and failover paths.

• Produce and maintain authoritative network diagrams, data flows, trust boundaries, and configuration baselines.

• Evaluate, recommend, and implement enhancements to improve security, availability, and performance.

• Serve as the primary network engineer for diagnosing, resolving, and preventing outages across the enterprise.

• Perform packet-level analysis (Wireshark/tcpdump), flow analysis, and log correlation to identify and remediate issues.

• Lead network upgrades, configuration changes, ACL/policy adjustments, and planned maintenance.

• Monitor network performance and availability; tune routing, firewall, and VPN parameters as needed.

• Support firewall policies and segmentation (Palo Alto preferred; Fortinet/Cisco ASA experience acceptable).

• Support security hardening, vulnerability remediation, and IA/ATO documentation requirements.

• Produce accreditation-ready artifacts, including boundary diagrams, data-flow representations, rule documentation, and enclave segmentation maps.

• Collaborate with ISSO and security teams to address findings and strengthen compliance posture.

• Document and support network dependencies across Active Directory, DNS/DHCP, VMware/vSphere, SAN/iSCSI/NFS storage, and application tiers.

• Validate end-to-end system functionality after network changes.

• Partner with Systems, Virtualization, Storage, and Field SMEs to maintain seamless operations across sites.

• Contribute to COOP/DR planning, design, and testing to ensure high availability and rapid failover capabilities.

• Support lab environment setup for replication, patch validation, and network simulation.

• Maintain technical documentation, diagrams, IP plans, SOPs, and configuration repositories.

• Coordinate with Revolutional and DHS technical leads to resolve issues, support field operations, and sustain mission readiness.

Qualifications

• Bachelor’s degree in IT, Engineering, or related field OR +5 years equivalent experience.

• +10 years of enterprise network engineering experience with increasing responsibility.

• Deep hands-on experience with:

  • Cisco routing/switching (3k–9k platforms)
  • Palo Alto or Fortinet firewalls and policy design
  • VPN architecture, IPsec tunneling, PKI integration
  • Network segmentation using VLANs, VRFs, and security zones
  • Packet capture and analysis
  • Network monitoring and telemetry tools (SolarWinds, NetFlow, Splunk, etc.)

• Demonstrated ability to produce complete network diagrams and architecture documentation based solely on device configuration, logs, and analysis.

• Strong understanding of cross-domain interactions (DNS, AD, VMware networking, SAN connectivity).

Preferred Certifications

• CCNA, CCNP Enterprise or CCNP Security
• PCNSE
• Fortinet NSE4/NSE5
• CCIE-level competency (or equivalent expertise)

Professional Competencies

• Excellent communication skills with both technical and non-technical stakeholders.
• Proven ability to work independently in high-pressure, mission-critical environments.
• Strong analytical, investigative, and documentation skills.

Physical Demands / Work Environment

• Must regularly lift/move up to 50 lbs.; occasionally up to 80 lbs. using a hand truck or lift cart.
• Requires standing, kneeling, crouching, and navigating server-room environments.
• Normal vision and hearing required; moderate server-room noise.