The Senior Network Engineer provides advanced engineering, operational, and advisory support for the Congressional Budget Office’s (CBO) enterprise Cisco network infrastructure. This position is responsible for designing, implementing, securing, and optimizing network architectures that support Zero Trust principles, federal cybersecurity requirements, and mission-critical operations. The Senior Network Engineer serves as a technical leader for network modernization initiatives, security architecture, incident response remediation, vulnerability management, and enterprise network resilience while ensuring compliance with NIST standards and industry best practices.

Network Architecture & Engineering

• Design, implement, operate, and optimize enterprise Cisco network infrastructure across core, distribution, access, and edge environments.
• Engineer secure network architectures that support Zero Trust principles, including segmentation, micro-segmentation, and identity-aware access controls.
• Manage and troubleshoot routing, switching, VLANs, DNS, DHCP, VPNs, and related network services.
• Develop and maintain network architecture diagrams, configuration baselines, and technical documentation.
• Evaluate and implement network technology improvements that enhance security, scalability, performance, and reliability.

Cybersecurity, Compliance & Operations

• Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207 (Zero Trust Architecture).
• Design and enforce least-privilege access controls and administer 802.1X network access control solutions.
• Secure perimeter and public-facing infrastructure through firewall optimization, access restrictions, encryption, and multi-factor authentication.
• Conduct vulnerability assessments, coordinate remediation activities, and maintain patch and firmware management processes.
• Configure and maintain centralized logging, monitoring, and SIEM integrations to support threat detection and incident response.
• Lead or support security assessments, audits, compliance reviews, and continuous monitoring activities.

Technical Leadership & Incident Response

• Serve as a senior technical advisor to stakeholders on network architecture, security, and operational improvements.
• Support incident response activities through network analysis, containment actions, forensic data collection, and remediation efforts.
• Conduct root cause analysis (RCA) for outages, performance degradation, and security incidents and implement corrective actions.
• Ensure network changes follow formal change management processes and include security impact assessments.
• Collaborate with cybersecurity, cloud, Microsoft, and operations teams to resolve complex technical issues and support organizational objectives.
• Develop and maintain Standard Operating Procedures (SOPs), operational processes, and documentation to support audit readiness and operational continuity.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field (or equivalent combination of education and experience).
• Minimum ten (10) years of enterprise network engineering experience.
• Demonstrated experience designing and implementing secure network architectures and Zero Trust solutions.
• Extensive experience with routing, switching, firewalls, VPNs, DNS, DHCP, network monitoring, and security operations.
• Experience supporting federal cybersecurity frameworks, including NIST SP 800-53, NIST SP 800-207, and Risk Management Framework (RMF) requirements.

Preferred Certifications

• Cisco Certified Network Professional (CCNP Enterprise) or Cisco Certified Network Professional (CCNP Security)
• Security+ , or equivalent industry certifications

Security Requirements

• U.S. Citizenship required.
• Ability to obtain and maintain a Public Trust or higher-level government clearance, as required.