Serves as the technical lead for network infrastructure projects and high-level troubleshooting. Must be capable of designing, configuring, and securing complex network environments independently. Responsible for advanced configurations (Cisco, Palo Alto, Zscaler, and MS Azure) and will serve as an escalation point for the Network Engineer. Position requires on-site support 2-3 days per week. While not anticipated, on-site requirements are subject to change based on customer requirements. Responsibilities may include, but are not limited to: • Support and maintain LAN/WAN, UPS and environment monitoring system for DC headquarters facility and 52 field offices. • Lead the installation, configuration, and maintenance of network infrastructure including Cisco router/switches, Palo Alto firewalls, and WAN/MPLS circuits. • Manage security posture using Cisco ISE, Palo Alto firewalls, and Zscaler; oversee network access controls and operations. • Configure and maintain Palo Alto firewalls using Panorama for centralized management. • Architect and manage site-to-site and client VPN connections to vendor, and Microsoft Azure. • Perform advanced troubleshooting on WAN/MPLS services and coordinate with service providers to resolve outages. • Mentor the other Network Engineers • Document network diagrams and standard operating procedures (SOPs). Required Experience • Requires a bachelor's degree in computer science, information technology, engineering, or a related field plus 7+ years of relevant work experience installing, supporting, and troubleshooting enterprise network systems. Additional experience can be substituted for a degree. • Requires the following experience: o Expert-level knowledge of Layer 2/3 Cisco switching, specifically StackWise and EtherChannel configurations. o Proven operational experience and proficiency with Cisco Merak, Cisco ISE, and Zscaler (ZIA/ZPA). o Palo Alto hands-on experience with Panorama and firewall rule management. o Ability to connect, secure, and manage VPNs to remote / Microsoft Azure. o Proficiency with Network Management Systems, specifically ManageEngine/OpManager/Netflow/Configuration Manager. Hands on knowledge of Cisco routers supporting MPLS Wide Area Networking, QOS, BGP, EIGRP, Multicasting routing, Extranet, MS ExpressRoute. o Deep understanding of DHCP, DNS, OSPF, and BGP. • Must be available for weekend maintenance events and emergency outages. • Must be engaging and proactive with critical thinking and problem-solving ability, both independently and as part of a team. • Candidates must demonstrate the ability to present ideas and reports clearly in English, both orally and in writing • Experience supporting a nationwide mid-sized Federal agency enterprise is a plus. • CCNP certification is highly desired. • Must obtain agency suitability clearance prior to start date.