Job Description Job Description Position Summary Senior Network Engineers lead the design, implementation, and troubleshooting of complex enterprise network infrastructure in support of the customer's requirements. Senior Network Engineers develop secure network designs per industry and government guidelines, resolve complex Tier III network operations and design issues, and evaluate new networking technologies in lab environments prior to production deployment. Senior Network Engineers are expected to supervise network support specialists during implementation, coordinate maintenance activities with minimal service disruption, and provide technical expertise across CONUS and OCONUS network environments. Requirements US Citizenship and TS/SCI with Polygraph (no exceptions) Education/Experience Requirements: Bachelor's degree and 7-11 years of relevant network engineering experience (Master's degree and 5-9 years also acceptable); additional relevant experience may be considered in lieu of a degree Required Skills: Demonstrated experience in Tier III or higher network operations and/or network design and implementation Strong expertise configuring and troubleshooting production network hardware (e.g., Cisco, Juniper, Brocade) Demonstrated experience with routing and switching protocols (e.g., OSPF, BGP, MPLS, VRF, VPN) at an enterprise scale Experience developing secure network designs in compliance with industry and government guidelines DoD 8140/8570 Information Assurance Technical (IAT) Level II certification required Experience supervising network support specialists during implementation and evaluating new technologies prior to deployment Strong critical thinking, technical writing, and oral communication skills, including the ability to present technical solutions to customers Senior positions review and guide the work of Junior and Mid-Level network engineers
11/12/2026
Full time
Job Description Job Description Position Summary Senior Network Engineers lead the design, implementation, and troubleshooting of complex enterprise network infrastructure in support of the customer's requirements. Senior Network Engineers develop secure network designs per industry and government guidelines, resolve complex Tier III network operations and design issues, and evaluate new networking technologies in lab environments prior to production deployment. Senior Network Engineers are expected to supervise network support specialists during implementation, coordinate maintenance activities with minimal service disruption, and provide technical expertise across CONUS and OCONUS network environments. Requirements US Citizenship and TS/SCI with Polygraph (no exceptions) Education/Experience Requirements: Bachelor's degree and 7-11 years of relevant network engineering experience (Master's degree and 5-9 years also acceptable); additional relevant experience may be considered in lieu of a degree Required Skills: Demonstrated experience in Tier III or higher network operations and/or network design and implementation Strong expertise configuring and troubleshooting production network hardware (e.g., Cisco, Juniper, Brocade) Demonstrated experience with routing and switching protocols (e.g., OSPF, BGP, MPLS, VRF, VPN) at an enterprise scale Experience developing secure network designs in compliance with industry and government guidelines DoD 8140/8570 Information Assurance Technical (IAT) Level II certification required Experience supervising network support specialists during implementation and evaluating new technologies prior to deployment Strong critical thinking, technical writing, and oral communication skills, including the ability to present technical solutions to customers Senior positions review and guide the work of Junior and Mid-Level network engineers
Job Description Job Description Description: On-site in Norfolk, VA Our client seeks a Firewall, VPN, and DMZ Network Engineer to support the SMIT program for the United States Navy. The role focuses on designing, implementing, and maintaining network security solutions across Juniper firewalls, DMZ environments, VPN architectures, and Cisco network appliances. The engineer will collaborate with cross-functional teams to protect infrastructure, lead SOP and TTP development, and support Incident, Change, and Problem Management within a mature operations environment. Due to federal security clearance requirements, applicant must be a United States Citizen with an active Secret clearance. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $70.00 to $75.00/hr. w2 Responsibilities: Provide VPN, DMZ, and Firewall Network Engineering subject matter expertise to support United States Navy operations on the NMCI network, including modification, operation, integration, maintenance, security, and service implementation. Collaborate with the Network Operations Center, Network Administrators, and Network Engineering teams to improve network security appliances and operational practices. Test and validate automation and best practice insertion opportunities. Lead development of Network SOPs and TTPs and drive continuous service improvements. Perform system performance tuning and enhancements and create and maintain Engineering Implementation Plans. Plan and execute network upgrades and maintenance with operations and release management stakeholders. Provide Tier III escalation support and coordinate vendor engagement for incident management. Participate in root cause analysis for problem management activities. Experience Requirements: 8 to 12 years of relevant network engineering experience. Equivalent work experience may substitute for a degree. Active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks. Ability to support off-hours work as mission requirements dictate and participate in on-call rotation. Tier III network operations expertise supporting NOC watch staff. Hands-on maintenance and configuration experience with firewalls, VPNs, and DMZ appliances. Extensive experience with routing, switching, MPLS, VPNs, routing protocols such as BGP, OSPF, IS-IS, and switching protocols such as Spanning Tree, VLANs, LLDP, and VoIP, as well as multicast and emerging network technologies. Strong understanding of IP addressing and subnetting. Knowledge of defense-in-depth, modern network architectures and topologies, network appliance integrity, and common network security elements. Experience with Ansible, Python, and infrastructure-as-code network automation. Education Requirements: B.S. degree in a related field or equivalent work experience. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve. Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Affirmative Action Employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws. Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!
11/12/2026
Full time
Job Description Job Description Description: On-site in Norfolk, VA Our client seeks a Firewall, VPN, and DMZ Network Engineer to support the SMIT program for the United States Navy. The role focuses on designing, implementing, and maintaining network security solutions across Juniper firewalls, DMZ environments, VPN architectures, and Cisco network appliances. The engineer will collaborate with cross-functional teams to protect infrastructure, lead SOP and TTP development, and support Incident, Change, and Problem Management within a mature operations environment. Due to federal security clearance requirements, applicant must be a United States Citizen with an active Secret clearance. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $70.00 to $75.00/hr. w2 Responsibilities: Provide VPN, DMZ, and Firewall Network Engineering subject matter expertise to support United States Navy operations on the NMCI network, including modification, operation, integration, maintenance, security, and service implementation. Collaborate with the Network Operations Center, Network Administrators, and Network Engineering teams to improve network security appliances and operational practices. Test and validate automation and best practice insertion opportunities. Lead development of Network SOPs and TTPs and drive continuous service improvements. Perform system performance tuning and enhancements and create and maintain Engineering Implementation Plans. Plan and execute network upgrades and maintenance with operations and release management stakeholders. Provide Tier III escalation support and coordinate vendor engagement for incident management. Participate in root cause analysis for problem management activities. Experience Requirements: 8 to 12 years of relevant network engineering experience. Equivalent work experience may substitute for a degree. Active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks. Ability to support off-hours work as mission requirements dictate and participate in on-call rotation. Tier III network operations expertise supporting NOC watch staff. Hands-on maintenance and configuration experience with firewalls, VPNs, and DMZ appliances. Extensive experience with routing, switching, MPLS, VPNs, routing protocols such as BGP, OSPF, IS-IS, and switching protocols such as Spanning Tree, VLANs, LLDP, and VoIP, as well as multicast and emerging network technologies. Strong understanding of IP addressing and subnetting. Knowledge of defense-in-depth, modern network architectures and topologies, network appliance integrity, and common network security elements. Experience with Ansible, Python, and infrastructure-as-code network automation. Education Requirements: B.S. degree in a related field or equivalent work experience. Recruitment Transparency Notice Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening and hiring process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team ( , ) inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process. Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following: When you work with Eliassen Group, all email communication will come from an address, never Gmail, Yahoo, etc. Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact . About Eliassen Group: Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients' capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve. Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Affirmative Action Employer and all employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws. Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!
Job Description Job Description VPN/ Firewall Network Engineer (w/ active Secret) Location: Norfolk, VA Clearance: Secret Type: Full-time, Onsite Schedule: 8AM - 5PM (M-F) and on call on weekends as needed Salary Range: $112,000 - $144,000. Salary range may vary depending on location. JOB DESCRIPTION Critical Solutions is seeking a VPN/Fire Network Engineer to support our federal customer. We are seeking a skilled Firewall & VPN Network Engineer proficient in network engineering appliances and technologies (i.e. Firewalls, DMZ, VPN) to join our Transport Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust & mature global network security solutions. Your expertise in configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure Firewall/VPN solutions, and administering Cisco network appliances will be crucial. You will collaborate closely with cross-functional engineering and project management teams to safeguard our network infrastructure against threats and vulnerabilities ensuring the highest levels of operational integrity. You will be a member of a technical team, managing customer relationships and overseeing key resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), and ITSM and DevSecOps initiatives. PRIMARY ROLES AND RESPONSIBILITIES: Support Current Operations for the Agency by providing VPN, DMZ, and Firewall Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world. A qualified candidate for this position would be responsible for network modification, operation, integration, maintenance, security, and implementation of services for the as-fielded Agency network. Collaborates with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve: Network Security Appliances (i.e. DMZ, VPN, Firewalls) Test and Validate Automation and best practice insertion opportunities. Leads development of Network SOPs/TTPs Continuous Service Improvements (CSI) System performance tuning and enhancements Create and maintain Engineering Implementation Plans (EIP) Plans and executes network upgrades and maintenance activities with the Operations Manager, NOC Lead, Release Management team and other key stakeholders. Tier III escalation support and vendor engagement supporting Incident Management activities. Active participation in Root Cause Analysis for Problem Management activities. BASIC QUALIFICATIONS: U.S. Citizen with an active DoD Secret security clearance. Requires B.S. Degree with prior relevant experience. Work experience may be substituted for degree at Hiring Manager's discretion. Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+. Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks. Ability to work or be called in to work during off-hours to meet customer mission support requirements. Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team. Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff. Perform highly technical maintenance and configuration to firewalls, VPNs, and DMZ appliances. Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e. BGP, OSPF, IS-IS), switching protocols (i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP) Multicast protocols and emerging network technologies. Strong understanding and in-depth knowledge of IP network/subnet addressing. Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements. Ansible, Python, IaC network automation experience. CERTIFICATION REQUIREMENT: Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+. Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks. SCHEDULE: 8AM - 5PM (M-F) and on call on weekends as needed LOCATION: Onsite 100% Norfolk, VA, Other acceptable work location: Pearl Harbor, HI/ San Diego, CA/ Washington, DC/ or Pensacola, FL ADDITIONAL INFORMATION: CLEARANCE REQUIREMENT: Must possess an active DoD Secret Clearance . In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED. CRITICAL SOLUTIONS PAY AND BENEFITS: Salary range $112,000 - $144,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements. BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more. Job Posted by ApplicantPro
11/12/2026
Full time
Job Description Job Description VPN/ Firewall Network Engineer (w/ active Secret) Location: Norfolk, VA Clearance: Secret Type: Full-time, Onsite Schedule: 8AM - 5PM (M-F) and on call on weekends as needed Salary Range: $112,000 - $144,000. Salary range may vary depending on location. JOB DESCRIPTION Critical Solutions is seeking a VPN/Fire Network Engineer to support our federal customer. We are seeking a skilled Firewall & VPN Network Engineer proficient in network engineering appliances and technologies (i.e. Firewalls, DMZ, VPN) to join our Transport Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust & mature global network security solutions. Your expertise in configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure Firewall/VPN solutions, and administering Cisco network appliances will be crucial. You will collaborate closely with cross-functional engineering and project management teams to safeguard our network infrastructure against threats and vulnerabilities ensuring the highest levels of operational integrity. You will be a member of a technical team, managing customer relationships and overseeing key resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), and ITSM and DevSecOps initiatives. PRIMARY ROLES AND RESPONSIBILITIES: Support Current Operations for the Agency by providing VPN, DMZ, and Firewall Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world. A qualified candidate for this position would be responsible for network modification, operation, integration, maintenance, security, and implementation of services for the as-fielded Agency network. Collaborates with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve: Network Security Appliances (i.e. DMZ, VPN, Firewalls) Test and Validate Automation and best practice insertion opportunities. Leads development of Network SOPs/TTPs Continuous Service Improvements (CSI) System performance tuning and enhancements Create and maintain Engineering Implementation Plans (EIP) Plans and executes network upgrades and maintenance activities with the Operations Manager, NOC Lead, Release Management team and other key stakeholders. Tier III escalation support and vendor engagement supporting Incident Management activities. Active participation in Root Cause Analysis for Problem Management activities. BASIC QUALIFICATIONS: U.S. Citizen with an active DoD Secret security clearance. Requires B.S. Degree with prior relevant experience. Work experience may be substituted for degree at Hiring Manager's discretion. Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+. Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks. Ability to work or be called in to work during off-hours to meet customer mission support requirements. Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team. Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff. Perform highly technical maintenance and configuration to firewalls, VPNs, and DMZ appliances. Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e. BGP, OSPF, IS-IS), switching protocols (i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP) Multicast protocols and emerging network technologies. Strong understanding and in-depth knowledge of IP network/subnet addressing. Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements. Ansible, Python, IaC network automation experience. CERTIFICATION REQUIREMENT: Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+. Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks. SCHEDULE: 8AM - 5PM (M-F) and on call on weekends as needed LOCATION: Onsite 100% Norfolk, VA, Other acceptable work location: Pearl Harbor, HI/ San Diego, CA/ Washington, DC/ or Pensacola, FL ADDITIONAL INFORMATION: CLEARANCE REQUIREMENT: Must possess an active DoD Secret Clearance . In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED. CRITICAL SOLUTIONS PAY AND BENEFITS: Salary range $112,000 - $144,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements. BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more. Job Posted by ApplicantPro
Global Enterprise Services, LLC
Fort George G Meade, Maryland
Job Description Job Description Location: Fort Meade, MD Clearance required: Secret Clearance Certification required by project: IAT Level 2 or willing to obtain within 3 Months of joining Overview: GES is seeking a highly skilled IP Network Engineer, to join our DISA program team in Fort Meade, MD. This is an exciting key position and opportunity to leverage your experience, skills, and leadership by providing support for end-to-end engineering solutions for DISN projects. As Lead Network Engineer, you will lead and oversee the planning and implementation of solutions across multiple technologies and platforms in the DISN and provide end-to-end integrated solutions ensuring mission success. You will support and lead technical planning, analysis, engineering, and testing for DISN initiatives and make technical recommendations. Responsibilities (include, but not limited to): Analyzes and studies complex system requirements. Designs software tools and subsystems to support software reuse and domain analyses and manages their implementation. Develop and validate system architecture. Develop and support initial implementation and provide lifecycle engineering of network architecture. Support Quality of Service (QoS) policies, requirements, and testing. Provide technical expertise in design review, lab testing & test report, implementation plan and deployment of new advanced large-scale complex DoD networks. Provide emerging insertion technologies (i.e. new features, capabilities, etc.). Support mission partners to satisfy the interoperability requirements. Provide all required documentation in support of Configuration Control Boards (CCB) and supervises software configuration management. Provide Tier III support and oversee Tier III support engineers. Conduct market research to find products to meet requirements. Implement MPLS services offerings on the DISN network called IP Transport Provider Edge (IPTPE). MPLS services include L3VPN, L2VPN, Virtual Private LAN service (VPLS) and Carrier Supporting Carrier (CsC). IPTPE platforms tested include Juniper MX960/MX480 and Cisco ASR9010/ASR9006 routers. Perform testing and support implementation of the DMZ COI VPN (part of NIPRNet Hardening project), which provides separation of the NIPRNet traffic and Mission Critical Community of Interest (COI) traffic using the MPLS L3VPN service. Configure and perform crypto testing and troubleshooting using various protocols. Provide technical security expertise in design, test, evaluation, and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET network protection; Assess and analyze current NIPRNET network architecture; Propose and analyze potential solutions. Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determines/implements effective countermeasures IAW established policies/regulations/directives. Deliver Router and Firewall Test Plans and resulting Test Reports; prepare field recommendations and Configuration Guides. Experience/Qualifications: DoD and/or Government program experience preferred; DISA experience a plus. BA/BS in a technical discipline (engineering, information technology, etc.) with at least 5 years of experience Large Enterprise or DoD IP Design Experience running BGP/MP-BGP (multi AS) and MPLS routing protocols Extensive router regression testing experience with Cisco ASR9K (ASR9010/ASR9006) routers Strong routing protocols experience: BGP, MPLS/RSVP, OSPF, IS-IS, Multicast, Layer-2/Layer-3 Virtual Private Network (VPN) and Carrier Supporting Carrier (CsC). Working knowledge of Microsoft Office Tools: PowerPoint, Word, and Excel Excellent communication (verbal and written), effective leadership, and interpersonal skills Preferred Experience/Qualifications Experience with Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, Smartbits and Agilent N2X CCNP or JNCIP or equivalent routing and switching experience Experience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, SONET Working experience with network security products (Firewalls, IDSs, SIEMs) and SNMP a plus
11/12/2026
Full time
Job Description Job Description Location: Fort Meade, MD Clearance required: Secret Clearance Certification required by project: IAT Level 2 or willing to obtain within 3 Months of joining Overview: GES is seeking a highly skilled IP Network Engineer, to join our DISA program team in Fort Meade, MD. This is an exciting key position and opportunity to leverage your experience, skills, and leadership by providing support for end-to-end engineering solutions for DISN projects. As Lead Network Engineer, you will lead and oversee the planning and implementation of solutions across multiple technologies and platforms in the DISN and provide end-to-end integrated solutions ensuring mission success. You will support and lead technical planning, analysis, engineering, and testing for DISN initiatives and make technical recommendations. Responsibilities (include, but not limited to): Analyzes and studies complex system requirements. Designs software tools and subsystems to support software reuse and domain analyses and manages their implementation. Develop and validate system architecture. Develop and support initial implementation and provide lifecycle engineering of network architecture. Support Quality of Service (QoS) policies, requirements, and testing. Provide technical expertise in design review, lab testing & test report, implementation plan and deployment of new advanced large-scale complex DoD networks. Provide emerging insertion technologies (i.e. new features, capabilities, etc.). Support mission partners to satisfy the interoperability requirements. Provide all required documentation in support of Configuration Control Boards (CCB) and supervises software configuration management. Provide Tier III support and oversee Tier III support engineers. Conduct market research to find products to meet requirements. Implement MPLS services offerings on the DISN network called IP Transport Provider Edge (IPTPE). MPLS services include L3VPN, L2VPN, Virtual Private LAN service (VPLS) and Carrier Supporting Carrier (CsC). IPTPE platforms tested include Juniper MX960/MX480 and Cisco ASR9010/ASR9006 routers. Perform testing and support implementation of the DMZ COI VPN (part of NIPRNet Hardening project), which provides separation of the NIPRNet traffic and Mission Critical Community of Interest (COI) traffic using the MPLS L3VPN service. Configure and perform crypto testing and troubleshooting using various protocols. Provide technical security expertise in design, test, evaluation, and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET network protection; Assess and analyze current NIPRNET network architecture; Propose and analyze potential solutions. Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determines/implements effective countermeasures IAW established policies/regulations/directives. Deliver Router and Firewall Test Plans and resulting Test Reports; prepare field recommendations and Configuration Guides. Experience/Qualifications: DoD and/or Government program experience preferred; DISA experience a plus. BA/BS in a technical discipline (engineering, information technology, etc.) with at least 5 years of experience Large Enterprise or DoD IP Design Experience running BGP/MP-BGP (multi AS) and MPLS routing protocols Extensive router regression testing experience with Cisco ASR9K (ASR9010/ASR9006) routers Strong routing protocols experience: BGP, MPLS/RSVP, OSPF, IS-IS, Multicast, Layer-2/Layer-3 Virtual Private Network (VPN) and Carrier Supporting Carrier (CsC). Working knowledge of Microsoft Office Tools: PowerPoint, Word, and Excel Excellent communication (verbal and written), effective leadership, and interpersonal skills Preferred Experience/Qualifications Experience with Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, Smartbits and Agilent N2X CCNP or JNCIP or equivalent routing and switching experience Experience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, SONET Working experience with network security products (Firewalls, IDSs, SIEMs) and SNMP a plus
Job Description Job Description Position Summary Mid-Level Network Engineers support the design, configuration, and troubleshooting of enterprise network infrastructure in support of the customer's requirements, working both individually and as members of a network operations team. Mid-Level Network Engineers implement routing and switching changes, perform Tier II/III troubleshooting of connectivity, latency, and routing issues, and support technical exchange meetings with other stakeholders. Mid-Level Network Engineers are expected to work with growing independence across CONUS and OCONUS network environments while continuing to build technical depth. Requirements US Citizenship and TS/SCI with Polygraph (no exceptions) Education/Experience Requirements: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field and 3-7 years of relevant professional network engineering experience; equivalent combination of education and experience may be considered Required Skills: Proficiency configuring and troubleshooting enterprise network infrastructure (LAN/WAN/CAN) Experience with routing and switching protocols (e.g., OSPF, BGP, MPLS, VRF, VPN) Experience with network hardware from major vendors (e.g., Cisco, Juniper, Brocade) Working understanding of network security principles and secure network design DoD 8140/8570 Information Assurance Technical (IAT) Level II certification (or ability to obtain) Strong troubleshooting skills across Layer 2 and Layer 3 network issues Strong written and oral communication skills, with the ability to collaborate across cross-functional and CONUS/OCONUS teams
11/12/2026
Full time
Job Description Job Description Position Summary Mid-Level Network Engineers support the design, configuration, and troubleshooting of enterprise network infrastructure in support of the customer's requirements, working both individually and as members of a network operations team. Mid-Level Network Engineers implement routing and switching changes, perform Tier II/III troubleshooting of connectivity, latency, and routing issues, and support technical exchange meetings with other stakeholders. Mid-Level Network Engineers are expected to work with growing independence across CONUS and OCONUS network environments while continuing to build technical depth. Requirements US Citizenship and TS/SCI with Polygraph (no exceptions) Education/Experience Requirements: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field and 3-7 years of relevant professional network engineering experience; equivalent combination of education and experience may be considered Required Skills: Proficiency configuring and troubleshooting enterprise network infrastructure (LAN/WAN/CAN) Experience with routing and switching protocols (e.g., OSPF, BGP, MPLS, VRF, VPN) Experience with network hardware from major vendors (e.g., Cisco, Juniper, Brocade) Working understanding of network security principles and secure network design DoD 8140/8570 Information Assurance Technical (IAT) Level II certification (or ability to obtain) Strong troubleshooting skills across Layer 2 and Layer 3 network issues Strong written and oral communication skills, with the ability to collaborate across cross-functional and CONUS/OCONUS teams
Job Description Job Description Network Engineer III (Juniper, BGP/MPLS) Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a Government polygraph (post-hire requirement). Travel: Up to 25% Salary Range: $107,000 - $117,000 Multi-domain transport at national scale, on Juniper iron. RISA is hiring a Network Engineer III to engineer and sustain an Intelligence Community customer's WAN, LAN, and campus networks across multiple security domains. The work is real engineering - new project requirements, site surveys, technology refresh, and the sustainment of infrastructure that has to stay up. You will talk to the owner here, not a recruiting queue. What You Will Do Engineer and sustain multi-domain WAN/LAN environments across NIPRNET, SIPRNET, and JWICS. Troubleshoot network media and components; monitor the health and performance of the network. Research and implement enterprise-wide solutions and enhancements against mission objectives. Develop test plans and configuration documentation for customer approval before implementation. Run traffic analysis and bandwidth optimization to hold performance and availability objectives. Perform site surveys for new installations and technology refresh; install and troubleshoot satellite communications equipment. Represent customer requirements in technical exchanges with other government agencies. What You'll Bring U.S. citizenship and an active TS/SCI. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 8+ years in network and transport technologies, including 4+ years on large-scale enterprise or global networks. IAT Level II certification. Juniper MX, EX, and SRX - switching, routing, and firewall/VPN. OSPF, BGP, MPLS, RSVP/LDP L2/L3VPNs, VRFs, IKE/IPSec, GRE tunnels, and import/export policies. IP services supporting IPv4/IPv6, VPN, multicast, QoS, SDN, SNMP, VoIP, and VTC. Cryptographic devices (KG-175G/X, KG-245A/X) and DoD Architecture Framework. Network analysis tooling - Network Automation/Node Manager, Juniper Secure Analytics, Infoblox, or Riverbed. Nice to Have JNCIA/JNCIS/JNCIP, or Cisco CCNA/CCNP/CCDP/CCVP or equivalent. CISSP, Security+, or ITIL v3 Foundations. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
11/12/2026
Full time
Job Description Job Description Network Engineer III (Juniper, BGP/MPLS) Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a Government polygraph (post-hire requirement). Travel: Up to 25% Salary Range: $107,000 - $117,000 Multi-domain transport at national scale, on Juniper iron. RISA is hiring a Network Engineer III to engineer and sustain an Intelligence Community customer's WAN, LAN, and campus networks across multiple security domains. The work is real engineering - new project requirements, site surveys, technology refresh, and the sustainment of infrastructure that has to stay up. You will talk to the owner here, not a recruiting queue. What You Will Do Engineer and sustain multi-domain WAN/LAN environments across NIPRNET, SIPRNET, and JWICS. Troubleshoot network media and components; monitor the health and performance of the network. Research and implement enterprise-wide solutions and enhancements against mission objectives. Develop test plans and configuration documentation for customer approval before implementation. Run traffic analysis and bandwidth optimization to hold performance and availability objectives. Perform site surveys for new installations and technology refresh; install and troubleshoot satellite communications equipment. Represent customer requirements in technical exchanges with other government agencies. What You'll Bring U.S. citizenship and an active TS/SCI. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 8+ years in network and transport technologies, including 4+ years on large-scale enterprise or global networks. IAT Level II certification. Juniper MX, EX, and SRX - switching, routing, and firewall/VPN. OSPF, BGP, MPLS, RSVP/LDP L2/L3VPNs, VRFs, IKE/IPSec, GRE tunnels, and import/export policies. IP services supporting IPv4/IPv6, VPN, multicast, QoS, SDN, SNMP, VoIP, and VTC. Cryptographic devices (KG-175G/X, KG-245A/X) and DoD Architecture Framework. Network analysis tooling - Network Automation/Node Manager, Juniper Secure Analytics, Infoblox, or Riverbed. Nice to Have JNCIA/JNCIS/JNCIP, or Cisco CCNA/CCNP/CCDP/CCVP or equivalent. CISSP, Security+, or ITIL v3 Foundations. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.