Senior Network Engineer

The Senior Network Engineer provides Tier-3/Tier-4 engineering expertise for design, implementation, troubleshooting, and optimization of the HSEN WAN and HQ LAN-A infrastructure, ensuring 99.5% availability for critical services. The role supports configuration management, change control, security patching, and incident response across routers, switches, firewalls, VPN/DMVPN/SD-WAN, wireless, and cloud network components.

The objective of the support services for this project is to design, build, and maintain a cloud infrastructure with a focus on network security that supports the organization's technology and business needs. This involves architecting scalable, secure, and highly available cloud solutions, ensuring optimal performance and cost-efficiency in cloud environments such as AWS, Azure, and Google Cloud. The role requires close collaboration with other IT teams, stakeholders, and third-party vendors to deliver cloud-based infrastructure and services that align with organizational goals.

Key Tasks and Responsibilities

Core Engineering:

• Engineer and implement upgrades to WAN/LAN per approved designs; validate in lab prior to production cut-over.

• Perform advanced routing (OSPF/BGP/DMVPN/SD-WAN), QoS, multicast, and segmentation.

• Integrate new security controls (NGFW, IDS/IPS, ZTNA) and support ATO evidence collection.

Operations & Support:

• Provide Tier-3 escalation and Tier-4 manufacturer liaison for Priority-1/2 incidents.

• Execute vulnerability remediation and patch management per DHS severity windows.

• Coordinate change-management reviews and post-implementation validation.

Process & Documentation:

• Develop and maintain device configurations, SOPs, logical/physical diagrams in CMDB/ServiceNow.

• Generate weekly service-request metrics, monthly availability, and root-cause reports.

*Contribute to automation scripts (Ansible/Python) and network-modernization prototypes.

This Role Provides Task Support for:

• Operational Support

• Software Maintenance and Upgrades

• Telecommunications Maintenance (Data, Voice, Images, including Wireless) *

• Infrastructure Management Services (IMS)

• Configuration Management

• Network/Hardware Support

• IT Support (Tier 3 network support)

• Resource Management

• Backup and Recovery Management

• Installation, Configuration, and Tuning

• Electronic Software Licensing Services including license: deployment, management, tracking, upgrading, etc.

• Infrastructure System Management - Firewalls, etc.

• IT Operation and Maintenance Planning

• Data Quality Management

• Transformation Services

• Continual Service Improvement

• Minimum Qualifications (must have):

Master's degree in Information Technology, Network Engineering, or related field.

15+years progressive network engineering in large enterprise WAN/LANs.

Experience using various platforms such as SharePoint, JIRA, and Confluence for project management

• Preferred Qualifications:

10+years supporting DHS WAN/LAN environments.

Experience with DHS cloud networking and automation (Infrastructure as Code).

Experience leading network modernization projects for DHS

Certifications

• Required Certifications: Active CCIE (Enterprise Infrastructure or Security).

• Preferred Certification: Cisco DevNet Professional, Palo Alto PCNSE, Juniper JNCIP, ITILv4, or GIAC-GCIH.

Security Clearance

• U.S. Citizen with ability to obtain DHS Public Trust / Full-Scope BI.

• Location: DHS HQ (NCR) with hybrid remote option; periodic travel (<20%).
• Schedule: Core hours 09:00-17:00 ET; on-call rotation for after-hours maintenance.
• Physical: Ability to rack/stack equipment up to 40lbs.