Network Engineer - Senior

Network Engineer - Senior
Clearance: Public Trust Tier 2
Location & Schedule: Hybrid, with on-site work during business hours at the Ford House Office Building (2nd & D Streets SW, Washington, DC) and CBO data-center facilities.

Role Summary
Nationwide IT Services, NIS, is seeking a senior network engineer to provide engineering, operations, optimization, and advisory support for CBO’s Cisco-based enterprise network across the core, distribution, access, and edge layers. Serves as CBO’s senior technical adviser, leads remediation of identified incident-response (IR) findings, and enforces Zero Trust across the network. Works with minimal supervision and resolves the most complex faults escalated from the service desk.

Required Experience

• 8+ years of progressive enterprise network engineering in Cisco environments (senior level).
• Architecting and operating core, distribution, access, and edge; routing, switching, VLANs, enterprise DNS, DHCP, and VPNs to hardened, documented standards.
• Zero Trust at the network layer: segmentation and micro-segmentation, least-privilege and identity-aware access, and 802.1X.
• Network security and compliance to NIST SP 800-53 (AC, CM, SC, AU), SP 800-207, and Cisco hardening best practices; continuous monitoring and vulnerability management.
• Incident-response support: containment, analysis, forensics, root-cause analysis, and remediation of findings.
• Perimeter and public-facing security: firewall rule management, ingress/egress filtering, MFA for administrative access.
• Change management with security-impact analysis; network diagrams, SOPs, and configuration baselines.
• Senior advisory; collaborates with cloud, Microsoft, and cybersecurity teams; supports audits and assessments.

Education & Certifications

• Recommended (to be competitive): Cisco CCNP Enterprise (CCIE preferred); a security or Zero Trust credential (e.g., Security+ or a Cisco security cert) is a plus.
• Bachelor’s in IT, Computer Science, or Engineering, or equivalent experience. Current certifications, ideally maintained 5+ years.

Key Technical Skills

• Cisco routers, switches, and firewalls; Cisco ISE for 802.1X / NAC; TrustSec / SD-Access or VLAN-and-ACL segmentation; VPNs; enterprise DNS/DHCP; SIEM and NDR integration; hardened Cisco baselines; configuration and change management.

Salary range $90,000 to $160,000 annually 
The salary range is a general guideline. We consider several factors when determining base salary offers, including the position's scope and responsibilities, the candidate's experience, education, and skills, and current market conditions.

 

Powered by JazzHR