Network Engineer

GovCIO is seeking a highly skilled Network Engineer with expertise in Zero Trust principles to design, enhance, and continuously mature the company’s next-generation network security architecture in support for Headquarters Air Force A2. This role is responsible for engineering frameworks, and implementation patterns that enable the Air Force Intelligence community to achieve a robust Zero Trust posture to support global operations.

This position will be located at Langley AFB in Hampton, VA and will be an onsite position.

Responsibilities

• Design and maintain the Air Force Intelligence Community’s Zero Trust network architecture, including segmentation models, micro-perimeters, secure access patterns, and continuous verification controls.
• Partner closely with security, cloud, infrastructure, manufacturing, and application teams to ensure Zero Trust capabilities are integrated effectively across all environments.
• Develop and document detailed architectural diagrams, standards, reference architectures, and engineering playbooks for Zero Trust network design.
• Lead technical evaluations of network security technologies such as software-defined perimeter tools, identity-aware proxies, next-generation firewalls, network access control platforms, and Zero Trust network gateways.
• Oversee the implementation of secure network connectivity for on-premises, hybrid, and cloud workloads, ensuring alignment with Zero Trust policies and identity-based access controls.
• Assess current network architecture and identify gaps, risks, dependencies, and modernization opportunities as part of the Zero Trust roadmap.
• Provide expert guidance to engineering teams during design reviews, solution development, and troubleshooting activities.
• Establish network performance, reliability, and security KPIs to measure progress and ensure continuous improvement.
• Stay current with Zero Trust frameworks, emerging threats, evolving technologies, and industry trends to guide future architectural evolution.

High School with 9+ years (or commensurate experience), Clearance Required: TS/SCI

• Understanding of Zero Trust principles and experience applying them to network design.
• Expertise with network technologies such as segmentation, SD-WAN, VPN alternatives, firewalls, NAC, DNS security, and secure access service edge (SASE).
• Experience with cloud networking across Azure, AWS, or similar platforms.
• DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)

Preferred Skills and Experience

• Experience in the Air Force Intelligence community
• Familiarity with NIST SP 800-207, CISA Zero Trust Maturity Model, and other recognized guidance.
• Demonstrated ability to collaborate across diverse teams and lead architectural decisions.
• Strong analytical and documentation skills with the ability to communicate complex technical concepts clearly.

USD $130,000.00 - USD $140,000.00 /Yr.