Network Engineer

What Impact You'll Have

The qualified and successfully hired Network Engineer will be responsible for:

• Managing security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement
• Ensuring network and endpoint systems are secure, efficient, and compliant
• Managing Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations
• Configuring OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment
• Segmenting networks using VLANs and Access Control Lists in a Zero Trust model
• Implementing network segmentation strategies to enhance security and minimize the attack surface
• Endpoint provisioning, patching, and hardening via ManageEngine, to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up to date
• Administering Windows 11, Linux, and BlueStacks
• Managing and supporting endpoint operating systems and Android emulators to ensure they meet performance and security standards
• Enforcing GPOs and AD-integrated access controls
• Implementing and managing Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions
• Developing and deploying automation scripts to streamline policy enforcement and system management tasks
• Designing, deploying, and optimizing a VMware Horizon-based VDI environment using vSphere and Cisco HyperFlex, including Android emulation, golden image management, and GPU virtualization, to ensure a secure, scalable, and high-performance virtual desktop infrastructure
• Architecting and maintaining a scalable, secure VMware Horizon-based VDI platform
• Managing and optimizing Cisco HyperFlex hyperconverged infrastructure, including compute, storage, and network stack, to support the VDI environment
• Designing, optimizing, and managing golden images for Windows 11 and Linux
• Creating and maintaining standardized images for virtual desktops, ensuring they are optimized for performance and security
• Implementing GPU virtualization to enhance the performance of Android emulators used within the VDI environment
• Implementing automation workflows for desktop deployment and updates
• Developing and deploying automation scripts and workflows to streamline the provisioning and updating of virtual desktops

What You'll be Owning

GRVTY is seeking a Network Engineer with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Chantilly, VA.  The ideal Network Engineer will have subject matter expertise in technical risk analysis of IT systems and networks, mobile and wireless networks, cloud-based computing, network management platforms, communication protocols, scripting or programming products, configuration scripts, and IT hardware and software products in support of Sponsor's risk assessment activities.

What You Must Have

• Active TS/SCI with Polygraph Clearance
• Demonstrated hands on experience with firewall administration, Network Access Control, and Access Controls.
• Demonstrated experience with VPN tunneling.
• Demonstrated experience with endpoint security and mobile emulation environments.
• Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.

What Would be Nice to Have

• Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+.
• Demonstrated experience collaborating with cybersecurity and VDI teams, Sponsor or otherwise.
• Demonstrated experience providing training and support.
• Demonstrated experience developing and maintaining network and endpoint security policies and procedures.
• Demonstrated experience conducting regular security assessments.
• Demonstrated experience implementing Zero Trust security model.

Virginia Pay Range

$150,000-$250,000