Network Engineer

Years of Experience
Five years relevant experience  

Degree:
Bachelor’s degree or equivalent experience 

Requirements:

• Experience supporting Cisco-based enterprise network infrastructure across core, distribution, access, and edge environments, including routing, switching, VLANs, VPNs, DNS/DHCP, firewall management, and performance optimization.  
• Experience applying NIST SP 800-53 and NIST SP 800-207 concepts to network security controls, Zero Trust Architecture, segmentation, micro-segmentation, least-privilege access, identity-aware networking, and 802.1X network access control.  
• Knowledge of vulnerability management, secure device hardening, RMF-aligned remediation, compliance monitoring, risk mitigation, and security assessment support. 
• Experience supporting network security operations, including centralized logging, SIEM integration, continuous monitoring, incident response, forensic support, root cause analysis, and remediation.  
• Experience maintaining secure network environments through configuration management, patch and firmware management, change control, secure configuration baselines, and operational continuity practices.  
• Ability to maintain network documentation, including SOPs, configuration baselines, asset inventories, network diagrams, and technical procedures, and serve as a technical adviser for complicated service desk tickets and network modifications. 

Required: Clearance
Public Trust Tier 2 clearance level and background check

• Implement and maintain network security controls aligned with NIST SP 800-53, including access control (AC), configuration management (CM), system and communications protection (SC), and audit and accountability (AU) control families. 
• Enforce Zero Trust network architecture principles in accordance with NIST SP 800-207, including network segmentation, micro-segmentation, and continuous verification of users and devices. 
• Design and implement least-privilege network access controls, ensuring role-based and identity-aware access across all network layers. 
• Manage 802.1X port-based network access control to prevent unauthorized device connectivity and enforce authentication at the network edge. 
• Configure/maintain centralized logging and audit capabilities for all network devices, ensuring logs are forwarded to SIEM platforms and retained in accordance with compliance requirements. 
• Conduct continuous monitoring and vulnerability assessments of network infrastructure, identifying risks and coordinating remediation in alignment with NIST Risk Management Framework (RMF) practices. 
• Harden all network devices using secure configuration baselines (e.g., Cisco Secure Configuration Guides), including disabling unnecessary services, enforcing strong encryption protocols, and securing management interfaces. 
• Secure public-facing and perimeter network assets by implementing strict ingress/egress filtering, firewall rule optimization, and multi-factor authentication for administrative access. 
• Support incident response activities by providing network-level analysis, containment actions (e.g., segmentation, blocking malicious traffic), and forensic data collection. 
• Establish and maintain secure network segmentation strategies to limit lateral movement and protect high-value assets and sensitive environments. 
• Ensure all network changes follow formal change control processes with security impact analysis, supporting compliance with NIST configuration management requirements. 
• Develop, implement, and maintain Network SOPs; review and update all SOPs on at least an annual basis or as required to reflect changes in technology, policy, or security requirements