Network Engineer SME

Serve as a senior technical authority in architectural review boards (ARBs), evaluating and validating vendor-proposed network, boundary, and DDI designs against the NGE Master Architecture and DoD Zero Trust reference mandates. Design and document holistic, end-to-end transport solutions across AWS, Azure, and on-premises VMware Cloud Foundation (VCF), defining routing topologies, traffic engineering, and resilient transit patterns. Architect and govern the enterprise Infoblox DDI infrastructure as the centralized Authoritative Source of Truth (ASOT). Design split-horizon DNS, DNSSEC, Anycast routing, and dynamic IPAM synchronizations across multi-cloud and on-prem segments. Architect and integrate micro-segmentation, software-defined perimeters, and secure access service edge (SASE) capabilities aligned with DISA Thunderdome standards. Oversee the technical integration of NGE enclaves with DODNET boundaries, ensuring compliance with DISA connection approval processes (CAP) and Versa-based SD-WAN gateways. Guide the deployment and policy harmonization of F5 BIG-IP (ASG/AWAF) and Palo Alto Networks NGFWs across on-premises and cloud boundaries to enforce Layer 7 inspection and zero-trust controls. Facilitate technical exchange meetings (TEMs) with integration contractors and software vendors (Cisco, Versa, VMware, Infoblox, F5, Palo Alto). Act as the final escalation authority for complex, cross-domain routing and name resolution issues. Design and operation of Infoblox as the Authoritative Source of Truth (ASOT). Implementation of F5 as an Application Security Gateway (ASG), SSL/TLS offloading and inspection, dynamic access control, and Layer 7 protection for enterprise services. Clearance: Must possess an active Top Secret security clearance with current SCI eligibility (TS/SCI). DoD Compliance: Must meet DoD 8140/8570 requirements for an IAT Level III or IASAE Level II position. An active (ISC)² CISSP certification is required. Education & Years of Experience: Bachelor of Science degree in Network Engineering, Computer Science, Computer Engineering, Systems Engineering, or a related technical discipline with 12 years of progressive engineering and architectural experience (or Master's degree with 10 years of experience). Enterprise DDI & DNS Experience: Demonstrated track record architecting enterprise-grade DNS, DHCP, and IPAM solutions, specifically utilizing Infoblox as an Authoritative Source of Truth (ASOT) in hybrid cloud environments. Hybrid Cloud Track Record: Demonstrated experience designing, deploying, and securing enterprise networks across AWS, Azure, and on-premises VMware VCF / NSX environments. Classified Environment Experience: Proven track record designing, integrating, and accrediting network transport and boundary security solutions within classified DoD (TS//SCI) enclaves. Infoblox Core Administrator / Engineer (CDCA / CICA) Cisco Certified Internetwork Expert (CCIE Enterprise Infrastructure) Palo Alto Networks Certified Network Security Engineer (PCNSE) F5 Certified Technology Specialist (F5-CTS) VMware Certified Advanced Professional (VCAP) - Network Virtualization AWS Certified Advanced Networking - Specialty Microsoft Certified: Azure Network Engineer Associate (AZ-700) Demonstrated experience managing Infoblox, firewalls, and cloud routing through Infrastructure as Code (Terraform providers, Ansible collections, Python automation using REST/WAPI). Deep operational understanding of DISA STIGs, DODNET connection requirements, NIST SP 800-207, and practical engineering experience implementing DISA Thunderdome zero-trust capabilities Prior experience in a SETA, A&AS, or direct engineering advisory role supporting Government Program Managers, Directors, or CTOs.