Job Title: Senior Network Engineer
Location: Columbia, MD
Employment Type: Full Time
Work Arrangement: On-Site
Work Site: Customer Site
Shift: Must be willing to work Mid Shift
Security Clearance: Current Department of Defense (DoD) Top Secret - Sensitive Compartmented Information (TS/SCI) with Polygraph is required.

Due to federal contract requirements, United States Citizenship and position-appropriate security clearance is required.

Position Overview: Braxton-Grant Technologies is looking for a Senior Network Engineer to provide assistance in all aspects of network management from network design through implementation, maintenance, and upgrading of existing networks. This role will ensure the overall health and strong security posture of complex network architectures and will be responsible for designing, implementing, and supporting network and communication solutions within a distributed software engineering environment. Responsibilities include analyzing technical requirements and network performance, troubleshooting connectivity and performance issues, and recommending network component purchases, upgrades, or modifications. The Engineer will ensure compliance is maintained with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded.

Key Responsibilities:

• Design solutions for and integrate, configure, deploy, test and provide support for numerous types of network devices, interfaces and methodologies;
• Optimize end-to-end system performance and dataflow management;
• Configure and optimize the network to connect various front-end and back-end components;
• Coordinate with the system engineering and dataflow efforts to ensure proper mission operations with minimal down time;
• Facilitate the implementation of high-speed, scalable, fault-tolerant network topologies as applicable to WAN and LAN design;
• Implement specific network solutions to support server requirements to include load-balancing, VPN's, firewall contexts, and network address translation (NAT) where appropriate;
• Minimize network latency and maximize data throughput through design analysis and network performance monitoring tools;
• Manage assigned tasks and provide guidance to Junior Network Engineers;
• Validate new and existing dataflow and data formats;
• Coordinate with appropriate dataflow organizations and end-customer recipients, follow-on data repositories and tasking organizations and understand potential adverse impacts on system-wide dataflow;
• Design, integrate, test and deploy RF communications solutions;
• Lead large efforts of dynamic requirements and scale;
• Work with System Engineers and cross-organizational teams to define requirements;
• Support efficient repeatable inspection process of network boundary traffic to inspect for evidence of successful and failed compromises, Advance Persistent Threats, and misuse of standard, permitted services;
• Support efficient repeatable inspection process to support review of all boundary services including but not limited to firewalls, proxies, and VPNs to ensure the security posture of the services are consistently applied and done so in accordance with mission and industry best practices;
• Support regular technical assessments of network boundaries including use of security tools in coordination with security elements of the Agency to ensure boundaries remain secure;
• Support monthly access reviews to verify that access remains limited to authorized users and is restricted to the minimum level necessary to perform job functions;
  Support security investigations as requested by Agency security organizations to include traffic inspection, dissection and reassembly of traffic;
• Consult on and engineer next-generation solutions compliant with Agency policies to meet changing security needs, incorporating industry best practices;
• Design, configure, deploy, and monitor integration of network security solutions with Agency-authorized authentication services including PKI, TACACS, RADIUS, and Active Directory;
• Design, configure, deploy and monitor local and global load balancing functions which support network performance while maintaining security solutions.

Required Qualifications:

• Education: Bachelor's degree in Engineering from an accredited college or university is required. Four (4) years of additional network engineering experience may be substituted for a bachelor's degree.
• Active TS/SCI clearance with polygraph.
• Twelve (12) years of directly related experience.
• Five (5) years of experience with What's Up Gold and Netflow.
• Five (5) years of demonstrated experience in Computer Network Operations - Protection Level (PL) 3 high/high solutions utilizing Layer 2 to Layer 7.
• Security+ Certification.
• Experience deploying, operating, managing, and monitoring network security devices and systems, with advanced knowledge of technologies including application, proxy, and Next Generation Enterprise firewalls; Control Center Management appliances; IPsec, SSL, and SSH; Cisco Secure Access Control Server (ACS) and Cisco Security Manager (CSM); Cisco VPN and firewall solutions; web proxies; load balancers; and related LAN/WAN network hardware and software.
• Ability to work independently with little direction and guidance.
• Excellent writing and communication skills, including the ability to develop analytical documents and conduct oral presentations.
• Understanding of and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions.
• Experience with Intelligence Community Directive (ICD) 503 instructions, system accreditation. and security system documentation.
• Knowledge of IP services (IPv4, VPN, IPv6, Multicast, QOS, SNMP, VOIP, VTC, etc.).
• Experience providing reports and products to senior management and customers.
• Experience with plans, designs, and evaluations of network security systems and architectures.

Desired Qualifications:

• CCNP Security and/or CCNA Security certification
• Prior experience with Palo Alto firewalls
• Palo Alto certification(s)
• ITIL certification
• Prior experience with DMVPN
• Prior experience with Symantec/Blue Coat products
• Symantec/Blue Coat certification(s)

What We Offer:
Braxton-Grant is committed to being a place where talented people do their best work. You'll join a collaborative, highperforming team that values curiosity, knowledgesharing, and continuous improvement. We support your growth through competitive pay, meaningful professional development opportunities, and a comprehensive benefits package designed to help you thrive both at work and beyond.

Pay Range: $140,000-$220,000
The salary range provided represents the range Braxton-Grant reasonably and in good faith expects to pay for this position at the time of posting. Actual compensation will be determined based on several factors including government contract labor categories and contract rates, education, relevant work experience, knowledge, skills, and competencies, and certifications. The posted salary range reflects base salary and does not include benefits.

Braxton-Grant offers a comprehensive benefits package for eligible full-time employees:

• Employer-subsidized HSA-compatible medical plans with out-of-network coverage and wellness rewards
• Vision and dental PPO plans
• Employer-paid short term disability insurance
• Employer-paid basic life and AD&D insurance
• Voluntary long-term disability insurance
• Voluntary supplemental disability, hospital protection, accident insurance, critical illness and cancer, and whole life policies
• 401k plan with generous employer match
• Professional development and tuition reimbursement up to $5,250 annually
• Employee referral bonus eligibility
• Up to 160 hours of PTO annually, aligned with applicable state leave regulations
• 10 paid holidays