OverviewThe Senior Network Engineer will provide advanced engineering, operational, and advisory support for the client's enterprise Cisco network environment. The primary objective of this role is to strengthen the security, reliability, and resilience of the network infrastructure while addressing identified Incident Response (IR) remediation requirements. The successful candidate will deliver critical services that include designing, implementing, and maintaining secure network architectures that enforce Zero Trust principles, such as network segmentation, micro-segmentation, and least privilege access controls. Furthermore, the engineer will guarantee that all network devices, encompassing switches, routers, and perimeter systems, are configured, hardened, and continuously monitored in accordance with federal security standards and industry best practices.
Essential Duties & Responsibilities:Qualifications:Responsibilities- Enterprise Network Engineering: Design, implement, operate, and optimize Cisco-based network infrastructure across core, distribution, access, and edge environments, ensuring high availability, scalability, performance, and resilience.
- Network Security Architecture & Compliance: Implement and maintain security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco security best practices, while actively supporting continuous monitoring, risk mitigation, and network security posture management.
- Network Access Control & Identity Integration: Manage and enforce 802.1X port-based network access control, integrate with enterprise identity services, and support Zero Trust and least-privilege access enforcement across all network layers.
- Routing, Switching & Infrastructure Services: Configure, maintain, and troubleshoot Virtual Local Area Networks (VLANs), Domain Name Systems (DNS), Dynamic Host Configuration Protocols (DHCP), Virtual Private Networks (VPNs), and related network services.
- Perimeter & Public-Facing Security: Secure public-facing systems, firewalls, remote access infrastructure, and edge devices through hardened configurations and strict access controls.
- Network Monitoring & Security Operations Enablement: Support network monitoring, logging, and integration with Security Information and Event Management (SIEM) and Network Detection and Response (NDR) tools, enabling threat detection, incident response readiness, and operational visibility.
- Vulnerability Management & Device Lifecycle: Oversee automated patch management, firmware updates, vulnerability remediation, and device lifecycle management in strict accordance with federal and organizational security policies.
- Change Management & Documentation: Lead change management processes, maintain comprehensive network diagrams, configuration documentation, hardware baselines, and Standard Operating Procedures (SOPs) on an annual review cycle to ensure audit readiness.
- Advisory & Technical Leadership: Serve as a senior technical advisor to client stakeholders, collaborating seamlessly with cybersecurity, cloud, and operations teams to resolve complex issues, improve network architecture, and support security assessments and audits.
- Customer Service & Team Collaboration: Act as a technical adviser for complicated service desk ticket resolution while collaborating with cloud, Microsoft engineering, and cybersecurity teams to support highly integrated technology operations.
Qualifications- Clearance & Background: Must possess U.S. Citizenship or Permanent Residence Status. Candidates must be able to successfully pass a Public Trust Tier 2 background investigation, as well as FBI criminal checks and fingerprinting.
- Education: A Bachelor's degree in an IT-related field is required
- Experience:
- A minimum of 7 years professional experience designing, implementing, and supporting enterprise network infrastructure, particularly in large-scale Cisco environments.
- A minimum of 5+ years of demonstrable experience leading network architecture, security engineering or complex infrastructure modernization initiatives.
- Certifications: Candidates must hold active, relevant network or cybersecurity IT certifications. These certifications (or their prior equivalents) must have been continuously maintained for a minimum of 5 years. Expired credentials or those never utilized professionally will not be considered.
Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment
- Specific vision abilities required by this job include close vision requirements due to computer workThe employee must occasionally lift and/or move up to 15 pounds
- Fine hand manipulation (keyboarding)
Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Exposure to general office conditions while conducting office duties
- Moderate noise (i.e., business office with computers, phone, and printers, light traffic)
- Ability to work in a confined area
- Ability to sit at a computer terminal for an extended period
