Network Engineer

ECS Tech Inc•Fairfax, VA

6d•$150,000 - $170,000•Hybrid

About The Position

Everforth ECS is seeking a Network Engineer to support multiple U.S. Coalition Mission Partner Environments (MPE) in an operational DoW environment. These environments host unique datasets, applications, and information systems that enable the development and deployment of Artificial Intelligence / Machine Learning (AI/ML) capabilities. The Network Engineer is responsible for designing, implementing, maintaining, and securing physical and virtual network infrastructures that support mission-critical operations across multiple security domains. This includes configuring and managing routers, switches, firewalls, Cross Domain Solutions (CDS), and cryptographic devices while ensuring maximum availability, security, compliance, and performance. This position is a demanding, high-energy role requiring broad technical expertise and the ability to support complex, multi-classification network environments. The ideal candidate possesses deep experience with data center and enterprise networking, Cross Domain Solution technologies, and cryptographic systems used in DoW environments. The candidate must also demonstrate strong analytical thinking, problem-solving, collaboration, time management, and the ability to communicate complex technical concepts to both technical and non-technical stakeholders.

Requirements

U.S. Citizen.
Active Secret security clearance, with the ability to obtain a Top Secret security clearance.
Bachelor’s degree in Computer Science, Information Security, or another Science, Technology, Engineering and Mathematics (STEM) discipline.
5+ years of progressive technical experience, with demonstrated proficiency in associated network engineering frameworks.
Ability to work in a hybrid capacity with 4 days onsite at Ft. Meade, MD and/or Fairfax, VA with occasional travel to Ashburn.
Ability to travel <20% throughout the lifespan of the Program to CONUS / OCONUS customer sites and government installations.
Ability to obtain a DoD 8140 IAT Level II Security+ (or higher) within 90 days of hire.
Prior infrastructure team experience with hands-on responsibility for all aspects of network management.
Experience designing, implementing, and supporting enterprise and data center network infrastructures in DoD or other highly regulated environments.
Hands-on experience with: Cross Domain Solutions (CDS), including deployment, administration, troubleshooting, accreditation support, and lifecycle management.
Hands-on experience with: Cryptographic systems, COMSEC equipment, and key management procedures supporting classified network environments.
Strong technical knowledge of network infrastructure, systems administration, cybersecurity, and cloud-based platforms (AWS, Azure).
Ability to understand a comprehensive system and its environment of operation.
Hands-on experience with all of the following activities: Designing, implementing, and maintaining multi-network transport.
Hands-on experience with all of the following activities: Configuring, hardening, and lifecycle management of Cisco series LAN/WAN switches, routers, firewalls, and Intrusion Prevention/Intrusion Detection devices.
Hands-on experience with all of the following activities: Boundary protection aligned with Zero Trust principles.
Hands-on experience with all of the following activities: Network and troubleshooting with network protocols: IPSEC, L3VPN, L2VPN, MP-BGP, OSPF.
Demonstrated mastery in the following technical capabilities: Next Generation Firewalls and layer 3 switches (Fortinet and Cisco).
Demonstrated mastery in the following technical capabilities: Automation (Python, Ansible, Git, CI/CD).
Demonstrated mastery in the following technical capabilities: VMware ESXi and NetApp storage appliances.
Demonstrated mastery in the following technical capabilities: Virtual networking.
Demonstrated mastery in the following technical capabilities: DoW ACAS, HBSS, SCAP, RMF, and STIGs.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Responsibilities

Devise solutions to complex technical challenges within the capacity and operational limitations of installed equipment.
Design, implement, and maintain secure network architectures supporting classified and coalition mission partner environments.
Design and maintain data center network architectures, including Spine-Leaf and Core/Distribution/Access topologies.
Manage Data Center Interconnects (DCI) and cloud/on-premises connectivity.
Implement, maintain, and troubleshoot routing technologies including BGP, OSPF, VXLAN, and EVPN.
Engineer, integrate, maintain, and troubleshoot Cross Domain Solutions (CDS) to support secure information sharing across multiple security domains and coalition networks.
Configure, administer, and maintain cryptographic and COMSEC devices, including key management procedures, cryptographic modernization efforts, and compliance with applicable DoW security requirements.
Support secure network transport technologies including encrypted WAN links, VPNs, and Type 1 encryption solutions.
Utilize monitoring, performance analysis, network management, and software/hardware tools to troubleshoot and isolate problems, gauge network performance, and trace data and protocol activity.
Architect, deploy, and administer production, test, development, and lab environments.
Develop and execute contingency plans for network software and hardware failures, including isolated and major outages.
Support risk mitigation activities such as Assessment and Authorization (A&A), continuous monitoring, vulnerability management, and configuration management.
Conduct functional, interoperability, performance, and security testing.
Create and maintain network diagrams, Standard Operating Procedures (SOPs), implementation plans, and audit-ready documentation.
Research, evaluate, and recommend emerging network, CDS, and cybersecurity technologies to support mission requirements.
Collaborate with cybersecurity, systems engineering, and mission partner teams to ensure secure and effective network operations.
Other duties, as assigned.