Network Engineer
Connexus Hub
Washington, United States of America
yesterday
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Washington, United States of America
Tech stack
IEEE 802.1X
Dynamic Host Configuration Protocol
DNS
Firmware
Virtual Private Networks (VPN)
Network Security
Network Diagrams
Routing
Zero Trust Network Access
Security Information and Event Management
Virtual Local Area Networks
Network Access Control
Sentry
Patch Management
Cisco networks
Vulnerability Analysis
Job description
Connexus Hub is hiring a Network Engineer to support the Congressional Budget Office (CBO) under the SENTRY IT Support BPA. The engineer provides engineering and operational support for CBO's Cisco-based enterprise network, enforcing Zero Trust principles, segmentation, and least-privilege access in accordance with NIST SP 800-53 and NIST SP 800-207., * Operate, optimize, and secure CBO's Cisco core, distribution, access, and edge environments.
- Implement and maintain network security controls aligned with NIST SP 800-53 (AC, CM, SC, AU) and Zero Trust (NIST SP 800-207).
- Configure and manage 802.1X port-based network access control, routing, switching, VLANs, DNS, DHCP, and VPNs.
- Forward device logs to the enterprise SIEM; conduct continuous monitoring and vulnerability assessments (NIST RMF).
- Harden devices to Cisco secure baselines; perform firmware/patch management and root-cause analysis.
- Maintain network diagrams, configuration baselines, and SOPs; support 24/7 monitoring.
Requirements
- Hands-on enterprise Cisco network engineering experience (routing, switching, firewalls, 802.1X).
- Current relevant certification(s) such as CCNA or CCNP, maintained for at least 5 years.
- U.S. person able to obtain and maintain a Public Trust (Tier 2) clearance (background check via Capitol Police).