Network Engineer

Day-to-day Responsibilities:

• Design, configure, and maintain enterprise network and security infrastructure (on-prem and cloud)
• Support cloud migration and hybrid connectivity efforts
• Implement and enforce security policies aligned with federal compliance requirements
• Troubleshoot network incidents and participate in change management processes
• Perform software/firmware updates and resolve complex technical issues
• Interface with users and customers on requests and issues
• Contribute to architecture documentation and ATO/assessment activities
• Provide after-hours and weekend support as needed

• 4-7 years of experience in network and/or security engineering
• Hands-on Cisco experience - Catalyst/Nexus switches, routers, and IOS-XE - sufficient to maintain both on-prem and cloud routers
• Experience with enterprise firewalls, specifically Palo Alto and/or Cisco Firepower (called out as a must-have) * Solid hands-on experience with a cloud environment - AWS or Azure - including cloud networking constructs (VNets, NSGs, route tables, Direct Connect)
• Experience with Azure Government or AWS Government
• At least a working understanding of Zero Trust Architecture principles
• Understanding of federal security frameworks: NIST 800-53, FISMA, and FedRAMP
• Experience performing software/firmware updates and troubleshooting complex issues
• Comfort interfacing directly with users/customers
• Able to be on-site Monday-Friday, and available for after-hours and weekend support as needed

Preferred Skills:

• Zscaler experience - ZIA and ZPA configuration, policy management, and integration with Zero Trust frameworks (nice-to-have, explicitly not required)
• One or more relevant certifications: CCNA/CCNP, CompTIA Security+/CySA+, AZ-700, AZ-500, Zscaler Certified Cloud Professional (ZCCP), or Palo Alto Networks Certified Network Security Engineer (PCNSE)