Senior Network Engineer

Years of Experience
Eight years relevant experience  

Degree:
Bachelor’s degree or equivalent experience 

Requirements:

• Experience designing, implementing, operating, and optimizing Cisco-based enterprise network infrastructure across core, distribution, access, and edge environments.  
• Experience applying NIST SP 800-53, NIST SP 800-207, Cisco security best practices, Zero Trust Architecture, segmentation, micro-segmentation, least-privilege access, and identity-aware network access mechanisms.  
• Experience with routing, switching, VLANs, DNS, DHCP, VPNs, 802.1X, firewalls, remote access solutions, edge devices, and network security services.  
• Experience integrating network environments with SIEM, network detection and response tools, logging, monitoring, alerting, and incident response capabilities.  
• Knowledge of network device hardening, vulnerability remediation, patching, firmware updates, lifecycle management, continuous monitoring, and security posture management.  
• Ability to serve as a senior technical advisor, support audits, assessments, and compliance initiatives, and maintain network diagrams, configuration documentation, SOPs, and operational procedures. 

Required: Clearance
Public Trust Tier 2 clearance level and background check. 

• Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207, including access control, configuration management, system and communications protection, audit/accountability, Zero Trust Architecture, segmentation, micro-segmentation, continuous verification, and least-privilege access. 
• Design, implement, and manage secure network access controls, including role-based access, identity-aware access, and 802.1X port-based authentication to prevent unauthorized device connectivity at the network edge. 
• Harden Cisco network devices and public-facing/perimeter network assets using secure configuration baselines, strong encryption, secured management interfaces, strict ingress/egress filtering, firewall rule optimization, and multi-factor authentication for administrative access.  
• Configure and maintain centralized logging, audit, monitoring, and alerting capabilities for network devices, including forwarding logs to enterprise SIEM platforms and supporting continuous, real-time monitoring of network infrastructure.  
• Conduct vulnerability assessments, continuous monitoring, and risk remediation for network infrastructure in alignment with NIST Risk Management Framework practices and organizational security requirements. 
• Support incident response and network security operations by providing network-level analysis, containment actions, forensic data collection, root cause analysis, and corrective/preventive actions for outages, performance degradation, and security events.  
• Establish, implement, and maintain automated network patch management, firmware update procedures, and device lifecycle practices in accordance with Cisco best practices and organizational security policies.  
• Develop, maintain, and update Network SOPs, network diagrams, hardware/configuration baselines, network configurations, asset records, and operational procedures to support audit readiness and operational continuity. 
• Lead or participate in security assessments, audits, and compliance reviews, providing evidence, documentation, remediation support, and senior technical advisory support to CBO stakeholders and technical teams.