> Markdown version of [/jobs/ext/3607138-network-services-lead](https://www.wearedevelopers.com/jobs/ext/3607138-network-services-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network Services Lead

- **Company:** MIT Lincoln Laboratory
- **Location:** Lexington, MA, United States
- **Experience:** Expert
- **Salary:** $134,100.0 - $181,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Computing Platforms, Border Gateway Protocol, Cloud Computing, Complex Networks, Data Centers, Dynamic Host Configuration Protocol, Software Design Patterns, Disaster Recovery, Domain Name System (DNS), Networking Hardware, Subnetting, Python (Programming Language), Network Security, Network Architecture, Network Planning and Design, Routing, Network Segmentation, Ansible, Simple Network Management Protocols, TCP/IP, Computer Networking Systems, System Availability, HybridCloud, Juniper, SC Clearance, Network Support, Palo Alto Networks, Firewall Services Module, Terraform, Open Network Automation Platform, Vmware
- **Published:** October 7, 2026
- **Apply:** https://jobs.military.com/career/358400/senior-network-engineer-massachusetts-ma-lexington

## About the Role

The ideal candidate combines strong hands-on technical expertise with an architectural mindset and can translate business, operational, cybersecurity, and compliance requirements into scalable and supportable network designs. The candidate will have a solid background with subnetting, switching, routing, firewall configuration to include managing security zones to limit east/west traffic, configuring and managing TACLANEs and supporting VTC appliances; familiarity with Commercial Solutions for Classified (CSfC) would be a bonus. This candidate will also possess a strong understanding of network automation and virtualization utilizing technologies such as Ansible and VMware NSX. Finally, preference will be given to candidates with experience supporting cloud infrastructure, ideally in classified environments but public experience would also be considered. As part of this role the individual will need to demonstrate proficiency applying STIGs and understanding how to use DISA's STIG Viewer, This position requires an individual with excellent communication (both oral and writing) and organizational skills. The individual must be able to work in a fast-paced environment at times with minimal supervision and execute operations, project and administrative tasks with a high degree of quality, while following existing processes and establishing new operational procedures and best practices where necessary. Additionally, the position requires the ability to work with members of other teams and staff to accomplish department and organizational goals.\n, * Bachelor's degree in a relevant field or the equivalent technical experience and certifications.\n

 * 10+ years of professional network engineering experience, including significant experience designing and architecting large-scale enterprise networks.\n
 * 5+ years of experience with Palo Alto firewalls or similar platform\n
 * 2+ years of experience with network automation (preferably with Ansible) and cloud network integration (preferably classified cloud)\n
 * Demonstrated experience serving as a senior network engineer, network architect, technical lead, or equivalent.\n
 * Expert knowledge of Juniper network technology solutions.\n
 * Expert knowledge of TCP/IP, DNS, DHCP, SNMP and BGP protocols.\n
 * Demonstrated experience implementing network automation using technologies such as Python, Ansible, Terraform, APIs, or similar tools.\n, * Juniper Networks Certified Professional (JNCIP) or Juniper Networks Certified Expert (JNCIE) in an applicable networking track.\n
 * Palo Alto Networks Certified Network Security Engineer (PCNSE) or current equivalent advanced Palo Alto certification.\n
 * Strong understanding of DoD networks and STIG security controls\n
 * Minimum of a Secret clearance\n
 * Minimum of a Security+ certification or the ability to obtain within 6 months\n
 * Demonstrated ability to learn new technologies and disciplines quickly\n
 * Ability to work independently toward delivery of goals as well as collaboration in team efforts\n
 * Strong foundational skills in organizing and managing technical projects\n
 * Excellent customer service skills (verbal and written)\n

## Description

* Develop and maintain enterprise network architectures supporting highly available and security-sensitive computing environments.\n
 * Establish network architecture standards, design patterns, reference architectures, and technology roadmaps.\n
 * Design LAN, WAN, data center, campus, cloud, and hybrid-cloud network solutions.\n
 * Develop high-level and detailed network designs, including logical and physical network diagrams, traffic flows, routing architectures, security boundaries, and resiliency strategies.\n
 * Architect solutions for network segmentation, redundancy, high availability, disaster recovery, and business continuity.\n
 * Evaluate existing network architectures and recommend modernization, consolidation, and lifecycle-management strategies.\n
 * Lead technical design reviews and ensure proposed solutions meet architecture, cybersecurity, operational, and performance requirements.\n
 * Serve as a senior technical escalation point for complex network engineering and performance issues.\n
 * Provide technical leadership and mentorship to network engineers.\n
 * Network Support: Provide 1st tier support resolving Service Desk tickets.\n