Position Summary

Emagine IT is seeking a Network Engineer to provide day-to-day engineering and operational support across a federal government client's enterprise network - wireless, switching, and routing - plus incident response on the network plane, aligned to the client's Zero Trust architecture. The role operates and maintains Cisco LAN/WAN infrastructure, supports Palo Alto firewall, Zscaler (ZIA/ZPA), and Aruba wireless/ClearPass NAC operations, and executes network changes through ServiceNow ERB/CCB change management, with infrequent on-site work at the New York City office as needed.

Key Responsibilities / Essential Functions

• Support installation, implementation, troubleshooting, and maintenance of client LANs and WANs, including Cisco routing/switching (Catalyst, Nexus, ISR/ASR) and inter-site connectivity.
• Provide production support of the network: day-to-day operations, continuous monitoring (SNMP, NetFlow, Syslog), and second-level problem identification, diagnosis, and resolution.
• Prepare and submit network change requests through ServiceNow in full ERB/CCB compliance; conduct impact analysis and risk assessment for routing (OSPF, BGP, EIGRP), VLAN redesign, and firmware upgrades; perform post-change verification and rollback when needed.
• Support Palo Alto firewall operations - policy lifecycle, least-privilege rule management, monitoring/logging, and incident response - in coordination with Zero Trust controls.
• Support Zscaler ZIA/ZPA operations, including connectivity troubleshooting, policy configuration support, and client-connector support.
• Support Aruba wireless and ClearPass NAC operations (via Aruba Central) at offices in D.C. and New York - port/VLAN changes, wireless connectivity, and configuration documentation/network diagrams.
• Enforce Zero Trust principles - identity-aware segmentation, no implicit trust by location, continuous monitoring - and coordinate unified policy enforcement across firewall, cloud-security, and identity services.
• Participate in Major Incident bridges for Priority 1 network outages; document root causes and corrective actions in ServiceNow to support prevention.

Required Qualifications

• Education: Bachelor's degree in Network Engineering, Computer Science, IT, or a related field, or equivalent technical experience/certifications.
• Experience: Four (4)+ years of hands-on network engineering/operations in an enterprise environment, including Cisco routing and switching and enterprise wireless.
• Zero Trust stack: Working operational knowledge of Palo Alto firewalls, Zscaler (ZIA/ZPA), and Aruba wireless/ClearPass NAC; familiarity with software systems, communications protocols (TCP/IP, OSPF, BGP, EIGRP), and network hardware.
• Process: Experience operating within ITIL-based change management (ERB/CCB) using ServiceNow as the system of record.
• Clearance & citizenship: Must currently hold an active Secret clearance and be able to maintain it throughout employment. U.S. citizenship is required for this project by the client. All personnel must satisfy government client's suitability and background-investigation requirements before receiving physical or logical access to facilities or systems.

Preferred Qualifications

• Cisco CCNA/CCNP; Palo Alto PCNSA/PCNSE; Aruba ACMA/ACMP; Zscaler certifications.
• ITIL v4 Foundation certification.
• Experience supporting Zero Trust initiatives aligned to OMB M-22-09 / CISA ZTMM.
• Prior federal network operations experience across multi-site environments.

Benefits

This position is eligible for Emagine IT's benefits package, which includes medical, dental, and vision insurance; a 401(k) with company match; paid time off and holidays; and professional development and certification support.

Work Location

This position is 100% on-site at a client office in Washington, D.C. Infrequent on-site work at the New York City office, as needed.

Physical Requirements

This position is generally performed in a standard office environment, with occasional work in network wiring closets or equipment rooms and periodic travel to a secondary office location. The physical demands described here are representative of those an employee must be able to meet, with or without reasonable accommodation, to perform the essential functions of this role.

• Ability to remain in a stationary position and operate a computer for extended periods.
• Ability to communicate effectively in person, by phone, and in writing/virtually with colleagues, government stakeholders, and leadership, including during Major Incident response calls that may occur outside standard business hours.
• Ability to perceive and interpret information displayed on a computer screen, including monitoring dashboards, logs, and network diagrams.
• Ability to access and work within network wiring closets, equipment rooms, or under-desk/rack areas to support cabling, port configuration, or hardware troubleshooting, including bending, kneeling, or reaching as needed.
• Ability to occasionally lift and/or move networking equipment and materials weighing up to 30 pounds (e.g., switches, access points, cabling, laptops).
• Ability to travel occasionally between the Washington, D.C. and New York City office locations as needed to support on-site network operations.

Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this role. Applicants who require accommodation during the application or interview process should contact [redacted] to request one.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.