5+ years of network engineering experience, particularly in Tier 3 troubleshooting within enterprise or DoD environments.
Bachelor's degree in computer science, information technology, or a related field, or equivalent experience.
Hands-on experience with Arista switches and Palo Alto firewalls.
Strong knowledge of routing and switching protocols, including BGP and VLANs.
Experience with Azure Network Security Groups and firewall policies.
Proficiency in packet capture and analysis tools like Wireshark.
Familiarity with DoD STIGs and RMF processes.
Responsibilities
Ensure secure LAN/WAN connectivity integrated with Microsoft Azure.
Support deployment and configuration of LAN/WAN infrastructure at DoD sites.
Implement and maintain firewall rulesets and routing protocols for secure connectivity.
Resolve complex network issues through diagnostics and remediation.
Collaborate with Cybersecurity teams for compliance with DoD standards.
Support network design to meet RMF and SAP requirements.
Develop and maintain comprehensive network documentation.
Benefits
Ongoing learning and development opportunities.
Flexible work arrangements.
Health benefits.
Supportive, virtue-centered team environment.
Full Job Description
Are you looking to take the next steps in your career as an Cleared Network Engineer? Let's chat and see if we are a good match!
Opportunity:
Virtual Service Operations is searching for a Cleared Network Engineer to join our dynamic team of experts in Lorton, VA. As a Cleared Network Engineer you will act as a Tier 3 escalation point and you will work closely with our Cybersecurity and Development teams to keep mission-critical networks running. You will own complex network issues from diagnosis through remediation, support secure connectivity integrated with Microsoft Azure, and help shape network designs that meet RMF and SAP requirements. This is a hands-on, high-impact role for an engineer who thrives on solving hard problems under pressure
Key Responsibilities:
Ensure secure, resilient LAN/WAN connectivity integrated with Microsoft Azure components.
Support the deployment, configuration, and sustainment of LAN/WAN infrastructure at DoD sites, including Arista switches and Palo Alto firewalls, and ensure integration with Edge systems in classified environments.
Implement and maintain firewall rulesets, NAT policies, VLAN configurations, and routing protocols (such as BGP) to provide secure and scalable connectivity across classified LAN networks.
Resolve semi-complex to complex network issues escalated from lower tiers through Tier 3 diagnostics, packet captures, and hardware/software remediation, with minimal operational impact.
Collaborate with Cybersecurity teams to ensure compliance with DoD STIGs, vulnerability scanning, and certificate validation processes.
Support network design elements required to meet Risk Management Framework (RMF) and Special Access Program (SAP) requirements.
Develop and maintain comprehensive, version-controlled documentation, including network designs, logical/physical topology, device configurations, and change control logs.
Work with Cybersecurity and Development teams to investigate site outages and network events affecting mission operations.
Required Qualifications:
5+ years of network engineering experience, including Tier 3 troubleshooting in enterprise or DoD environments.
Bachelor's degree in computer science, information technology, or a related field (or equivalent work experience).
Hands-on experience configuring and supporting Arista switches and Palo Alto firewalls.
Strong knowledge of routing and switching, including BGP, VRFs, Route Redistribution, VLANs, VXLAN, Virtual Firewall and NSG rulesets, NAT, and TCP/IP.
Experience configuring, administering, and maintaining Azure Network Security Groups (NSGs) and Azure Firewall policies.
Experience building and managing firewall rulesets and security policies.
Experience integrating on-premises networks with Microsoft Azure networking.
Proficiency with packet capture and analysis tools (e.g., Wireshark, tcpdump).
Working knowledge of DoD STIGs, RMF, and vulnerability management processes.
Experience maintaining network documentation and following change control processes.
Strong analytical and problem-solving skills, with the ability to make sound decisions under pressure.
Preferred Qualifications:
Experience supporting classified networks and/or SAP environments.
Experience with Edge computing systems and Languages like YAML, JSON, BICEP, GIT and GIT Repo.
Certifications such as CCNP (Cisco), PCNSE (Palo Alto), ACE (Arista), or Azure Network Engineer Associate (AZ-700).
Requirements
Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available).
Must be willing to work onsite. (This role may include work outside core hours for high-priority outages and may include on-call responsibilities.)
Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
Ability to work independently and collaboratively in a mission-focused environment.
Must possess an active TS/ SCI clearance or above.
Must possess an activeDoD 8570/8140 IAT Level II certification or greater (e.g., Security+ CE)
Please note that pursuant to a government contract, this specific position requires U.S. citizenship status.
What is Important to Us:
You are an excellent communicator in writing and speaking.
You have the ability to work independently but also value teamwork.
Your problem-solving skills are excellent.
You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
You seek a community of virtue-centered co-workers and clients.
What we offer you: As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone . We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.
