Senior Network Engineer

Description

The company is a global technology and professional services firm that serves US government agencies, defense, and the intelligence community.

This role supports the Health Resources & Services Administration (HRSA).

You will take ownership of the design, day-to-day running, and security of HRSA's network, and help with the wider enterprise LAN/WAN, firewall, and remote access setup.

This is hands-on engineering work alongside project managers, the Office of Information Security and Privacy (OISP), and desktop and server support staff.

Responsibilities

• Set up and maintain routers, switches, firewalls, and remote access systems so the network stays secure and can grow.
• Deploy and support RSA SecurID and RSA Authentication Manager, including links to VPNs, RADIUS, and enterprise authentication.
• Build and troubleshoot IPv4 and IPv6 designs that connect cleanly and scale across environments.
• Create engineering solutions using a structured design process.
• Work with project managers and engineers to deliver complex network projects on schedule and within scope.
• Turn customer and business needs into technical designs for hard networking problems.
• Keep the network sound, secure, and compliant with federal and internal policy, including backup and recovery.
• Track network performance with leading monitoring tools and resolve problems before they spread.

Requirements

• Bachelor's degree, or an equivalent mix of education and experience.
• 8+ years in network engineering covering TCP/IP, DNS, routing and switching, IPsec VPNs, firewalls, and tracing connectivity faults, including packet capture analysis in Wireshark.
• Hands-on Cisco switching work and IOS upgrades, plus at least one enterprise firewall platform: Cisco ASA or Firepower, or Palo Alto with Panorama.
• Experience in federal or enterprise settings with strict compliance and uptime of 99.9% or higher, plus knowledge of NIST 800-53, TIC 3.0, and CISA BODs.
• Formal change management experience and TLS certificate lifecycle management.
• Strong communication, documentation, and teamwork skills.
• Preferred: Zscaler Certified Cloud Professional (ZCCP) or Zscaler Certified Cloud Administrator (ZCCA).
• Preferred: Okta Certified Professional or higher.
• Preferred: experience with Cisco ISE, RSA SecurID, SolarWinds scripting, Azure networking (NSGs), Riverbed, Grafana, or Cribl.
• Preferred: hands-on administration of Zscaler ZIA, ZPA, and ZDX.
• Preferred: experience connecting Okta or another IdP to Zscaler via SAML and SCIM.

Conditions

You must be able to obtain Public Trust clearance, with an NACI (T1) check.

You must have lived in the US for 3 of the last 5 years and pass a public trust background investigation.

US citizenship is not required.

This is a regular, full-time position with 40 scheduled hours per week.

No travel is required.

The role is onsite in Rockville, Maryland, USA.

The likely pay range is $111,350 to $150,650. This is not a guarantee. Actual pay depends on experience, location, and possibly contract terms, and may fall outside this range.

Identity verification uses biometrics and AI, and you must be on camera for virtual interviews. The company may take your photo to confirm identity, and by proceeding you authorize biometric data use for verification and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre- and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible, plus paid vacation, sick and personal time, holidays, parental, military, bereavement, and jury duty leave.
• Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• Paid education and certifications, internal mobility support, and access to current technology.
• The total rewards package is reviewed regularly to stay competitive.