Network Engineer CMMC

The Senior CMMC Network Engineer will design, implement, secure, and support enterprise network infrastructure across LAN, WAN, wireless, data center, and cloud environments. This role focuses on building resilient, segmented network architectures that meet CMMC, NIST SP 800-171, CUI protection, and related compliance requirements. This is a three-month contract position based in Portland, Oregon, with occasional on-site support required., * Design, implement, and maintain enterprise LAN, WAN, wireless, data center, and cloud network infrastructure.

• Support network architecture aligned with CMMC, NIST SP 800-171, and CUI protection requirements.
• Lead Cisco Software-Defined Access (SDA) design and implementation, including DNA Center, TrustSec, Security Group Tags, and network segmentation.
• Configure and optimize routing and switching technologies, including SD-WAN, BGP, OSPF, EIGRP, VLANs, STP, HSRP, and VRRP.
• Configure and support firewalls, VPNs, access controls, encryption, logging, and other network security controls.
• Design and maintain secure network environments supporting regulated or sensitive data.
• Lead network upgrades, migrations, circuit turn-ups, and infrastructure projects.
• Design and support AWS and Azure networking, including VPCs, Transit Gateway, VNets, peering, route tables, security groups, NSGs, and Azure Firewall.
• Implement secure hybrid connectivity using technologies such as IPsec VPNs, AWS Direct Connect, and Azure ExpressRoute.
• Monitor network health, troubleshoot performance and availability issues, and perform root cause analysis.
• Maintain network diagrams, standards, runbooks, security documentation, and compliance artifacts.
• Provide technical leadership and mentorship while supporting operational and on-call activities as needed.

• Relevant education, training, certifications, or equivalent practical experience.
• 7+ years of hands-on enterprise network engineering experience.
• Experience supporting CMMC, NIST SP 800-171, DFARS, or similar cybersecurity compliance requirements.
• Strong Cisco routing and switching expertise, including TCP/IP, subnetting, DNS, DHCP, and InfoBlox.
• Experience with WAN technologies including DMVPN, SD-WAN, dedicated internet access, and broadband services.
• Experience with Cisco and/or Meraki wireless networking.
• Experience with Palo Alto, Cisco ASA, Cisco FTD, or comparable enterprise firewall technologies.
• Experience with VPN solutions and network segmentation in regulated environments.
• Experience designing and supporting AWS and Azure networking and secure hybrid connectivity.
• Experience contributing to System Security Plans, Plans of Action and Milestones, assessment documentation, or similar compliance artifacts.
• Strong troubleshooting, communication, collaboration, stakeholder management, and technical leadership skills.
• CMMC, CCNP, CCIE, PCNSE, Fortinet, SD-WAN, network automation, or NAC experience is preferred.