OverviewPosition Title: Network Engineer
Location: Annapolis Junction, MD
Reports To: Program Manager
Job Type: Full-time
Clearance Requirement: Active TS/SCI with Polygraph
Summary:As a Network Engineer for a recently awarded government contract, you are a crucial architect of the secure transport and infrastructure environments supporting mission-critical operations. We are seeking a dedicated technical problem-solver with expertise in high-assurance network architecture, software-defined networking, and systems integration. In this role, you will design, deploy, maintain, and optimize secure network paths across multi-site datacenters, enclaves, and tail sites, ensuring strict availability, resilience, and security boundary enforcement.
Key Responsibilities:- Design, deploy, configure, and maintain high-assurance network infrastructure, routers, switches, and endpoints supporting multi-datacenter VDI environments, secure enclaves, and tail-site connectivity.
- Provide technical leadership and escalation support for Network and System Administrators to optimize system performance, automate network management, and eliminate infrastructure bottlenecks.
- Engineer, configure, and troubleshoot network interfaces, one-way diodes, and boundary protection devices to guarantee secure data transmission across cross-domain and cryptographic boundaries.
- Interface network systems with high-assurance cryptographic equipment, key management devices, and hardware security modules (HSMs) to enforce data protection and key distribution integrity.
- Implement and sustain customer compliance agents and security controls across network devices to maintain continuous Authority to Operate (ATO).
- Support Network enterprise mandates, conduct adjacent and complementary network engineering operations, and execute automated configuration management and drift remediation using Infrastructure as Code (IaC) tools.
Qualifications:Education:- Bachelor's degree in Network Engineering, Computer Science, or a related technical discipline from an accredited college or university.
- 4 years of professional experience may be substituted for a degree
Experience:- NE1: 5+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexity
- NE2: 10+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexity
- NE3: 15+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexity
Technical Skills:- Networking & Protocols: In-depth expertise in software-defined networking (SDN), WAN/LAN routing, switching, and VPN implementation. Proven capability in designing boundary defenses, including cross-domain solutions and unidirectional diodes, while performing advanced network performance modeling to ensure high availability across geographically dispersed datacenters.
- Cryptographic & Enclave Security: Advanced proficiency in implementing cryptographic standards (e.g., FIPS 140-2/3), managing secure key lifecycle operations (rotation, revocation, and storage), and designing cryptographic boundary defenses for classified or air-gapped environments. Hands-on experience integrating network platforms with Public Key Infrastructure (PKI), Key Management Infrastructure (KMI) concepts, high-assurance encryption devices, and Zero Trust Architecture (ZTA) to secure mission-critical workloads.
- Infrastructure as Code & Security Tools: Proficiency in automating infrastructure via Ansible playbooks and GitLab CI/CD pipelines. Experience in systems hardening to DISA STIGs and CIS Benchmarks, utilizing vulnerability scanning tools (Nessus), file integrity monitoring (Tripwire), and implementing network logging and observability using the ELK stack (Elasticsearch, Logstash, Kibana) and Grafana to maintain continuous compliance and RMF alignment.
Compensation and Benefits:- Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.
- Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.
- For the full list of LufCo Benefits, visit our website: https://www.lufburrow.com/careers
Position availability can vary due to dynamic, evolving contract needs. This job posting being active does not guarantee an immediately available position matching its description. This job description is intended to provide a general overview of the responsibilities and qualifications for this position. It is not an exhaustive list and may be subject to change based on the needs of the company.
LufCo Employees: This position qualifies for up to a Purple Award level referral bonus. For more information, visit the Employee Portal.
