Network Engineer, Senior (BG26100956PL)

The Bowen Group Inc.•Washington, DC

45d•$145 - $165

About The Position

The Bowen Group, a GTSC company, seeks a senior Network Engineer to design, build, maintain, and sustain classified network infrastructure supporting enterprise IT operations across three geographically dispersed government sites, including two SCIF facilities serving TS/SCI users. The role works with cross-functional teams to ensure reliable, secure connectivity across multiple locations. The position is based in the Washington, DC metro area and involves travel to program locations, with an expected travel level of 25–50%. A current Top Secret clearance with SCI eligibility and Special Access Programs (SAP) eligibility is required; only applicants with a current security clearance will be considered. Candidates must also successfully complete security screening related to foreign contacts, foreign interests, foreign travel, personal conduct, and financial responsibility for SAP access determination. The Network Engineer designs and implements logical and physical network solutions; engineers resilient connectivity across sites, datacenters, cloud, wide-area networks, and other distributed environments; monitors and troubleshoots network performance; and integrates network security controls. The position also develops automation and infrastructure-as-code practices, maintains network documentation and change records, participates in incident response and change management, collaborates with technical teams, and supports video teleconferencing and conference-room AV capabilities. The role may support NOC/SOC functions, including monitoring tools, coverage models, and 24x7 support where required.

Requirements

At least 5 years of network engineering experience, including experience in classified environments.
Bachelor's degree in a related field or equivalent experience.
Working knowledge of routing, switching, and network security fundamentals.
Relevant certification such as CCNA, CCNP, or Security+.
Familiarity with ICD 705 physical security standards for SCIF design and accreditation.
Familiarity with the Risk Management Framework (RMF) per NIST SP 800-37 and NIST SP 800-53 for system security authorization.
Current Top Secret clearance with SCI eligibility and SAP eligibility; only applicants with a current security clearance will be considered.
Foundational understanding of network models, packet flow, encapsulation, and protocol behavior.
Knowledge of IPv4 and IPv6 addressing, subnetting, name resolution, and address-management principles.
Knowledge of Layer 2 and Layer 3 networking, routing, switching, and segmentation.
Knowledge of transport protocols, application traffic patterns, and quality-of-service principles.
Knowledge of network security, encryption, access control, secure remote access, and traffic inspection.
Familiarity with wide-area, datacenter, cloud, and software-defined networking concepts.
Knowledge of high availability, redundancy, load distribution, and failure-domain design.
Knowledge of network monitoring, telemetry, logging, packet analysis, and performance engineering.
Foundational skills in scripting, automation, version control, and configuration management.
Ability to conduct structured troubleshooting and root-cause analysis.
Must successfully complete SAP access screening related to foreign contacts, foreign interests, foreign travel, personal conduct, and financial responsibility.

Nice To Haves

Experience supporting cross-domain or multi-level security network solutions.
Experience deploying networks in newly constructed or renovated facilities.
Demonstrated experience leading or supporting large, geographically dispersed teams.
Experience supporting Special Access Program (SAP) facilities, systems, or environments.

Responsibilities

Design, implement, configure, test, maintain, and sustain enterprise network infrastructure and services across all sites.
Develop logical and physical network designs based on performance, availability, security, and operational requirements.
Engineer resilient connectivity across sites, datacenters, cloud, wide-area networks, and other distributed environments.
Apply principles for addressing, segmentation, routing, switching, traffic management, and access control.
Monitor network health, capacity, latency, availability, and utilization.
Troubleshoot complex network issues using structured analysis, packet-level inspection, telemetry, logs, and performance data.
Establish redundancy, failover, fault-isolation, and recovery mechanisms.
Integrate network security controls consistent with zero-trust and defense-in-depth principles.
Develop repeatable configurations, validation procedures, automation, and infrastructure-as-code practices.
Maintain accurate diagrams, configurations, interface definitions, operating procedures, and change records.
Participate in change management, incident response, root-cause analysis, and corrective-action planning.
Collaborate with systems, network, cybersecurity, and operations teams.
Evaluate technologies based on standards compliance, interoperability, lifecycle cost, supportability, and mission suitability.
Design and implement network automation to standardize configuration, testing, deployment, monitoring, and compliance, reduce human error, and accelerate reliable network service delivery.
Support design and integration of video teleconferencing (VTC) and conference-room AV capability across program sites, including classified and unclassified variants.
Support network and security operations center (NOC/SOC) functions, including monitoring tools, coverage models, and 24x7 support where required.