Network Engineer

Swift•Herndon, VA

25d•Onsite

About The Position

The Swift Group is a privately held, mission-driven and employee-focused services and solutions company headquartered in Reston, VA. Our capabilities include Software Development, Engineering & IT, Data Science, Cyber Enablement, Logistics, and Training. Founded in 2019, Swift supports Civilian, Defense, and Intelligence Community customers across the country and around the globe. We’re looking for a highly experienced Network Engineer to design, implement, and sustain complex, mission-critical networks. The ideal candidate brings 8+ years of hands-on experience engineering and operating complex IP networks, with expertise in routing and switching, network security, and cloud-integrated architectures. The location of this job is Herndon, VA.

Requirements

BS in Computer Science, Information Technology, Network Engineering, or a related technical field, or equivalent professional experience
8+ years of hands-on experience designing, implementing, and operating enterprise-grade IP networks
Deep expertise in routing protocols (BGP, OSPF, EIGRP, IS-IS) and switching technologies (STP, LACP, VTP, 802.1Q)
Proficiency with Cisco platforms (routers, switches, ASA/Firepower firewalls); experience with additional vendors (Juniper, Palo Alto, Aruba) a plus
Experience designing and operating secure network architectures including firewall policy, VPN technologies (IPsec, SSL), ACLs, and network segmentation
Demonstrated experience with network automation tools and scripting (Ansible, Python, or similar); familiarity with infrastructure-as-code practices
Experience with SD-WAN/SDN solutions and cloud networking (AWS, Azure, and/or GCP)
Familiarity with NAC platforms (e.g., Cisco ISE, Aruba ClearPass) and endpoint access control policy enforcement
Ability to produce clear and thorough technical documentation, network diagrams, and design presentations for both technical and non-technical audiences
US citizenship and an active [Clearance Level] security clearance required

Nice To Haves

Active CCNP, CCIE, JNCIE, or equivalent professional network engineering certification
Experience with MPLS transport services and inter-provider BGP peering
Background operating satellite, wireless, or tactical communications networks in support of government or military missions
Familiarity with voice and video over IP (VoIP/VTC) infrastructure including SIP, H.323, and QoS engineering
Experience hardening networks to meet security standards and supporting system accreditation processes (RMF/ICD 503)
Exposure to IPv6 design and dual-stack migration planning
Prior experience with network forensics, packet analysis (Wireshark, tcpdump), and supporting incident response or intrusion analysis activities
Experience with large-scale multi-tenant or high-availability network environments in a cleared government or IC context
Familiarity with DISA STIGs and DoD/IC network security compliance frameworks

Responsibilities

Network Architecture & Design: Design, implement, and manage complex enterprise and service-provider scale IP networks spanning LAN, WAN, and cloud environments.
Routing & Switching: Plan, configure, and optimize dynamic routing protocols including BGP, OSPF, EIGRP, and IS-IS; implement and tune advanced switching features including STP, LACP, VTP, and 802.1Q trunking.
MPLS & Transport Services: Design and deliver MPLS/BGP transport services and manage integrations between service providers and customer environments.
Network Security: Harden network infrastructure and enforce security controls including next-generation firewalls, VPNs, ACLs, network segmentation, and Zero Trust principles; serve as a collaborative partner to Cybersecurity teams.
Automation & DevOps: Automate provisioning, configuration management, and validation using tools such as Ansible, Python, and Terraform; contribute to CI/CD pipelines and infrastructure-as-code practices.
Cloud & Hybrid Networking: Implement and support SD-WAN, SDN, and network virtualization (NFV) solutions; architect and manage cloud networking environments across AWS, Azure, and/or on-premises hybrid deployments.
Network Access Control: Implement and manage Network Access Control (NAC) technologies to enforce endpoint compliance policies and control access to sensitive network segments.
Operations & Incident Response: Serve as the Tier 3/4 escalation point for complex network incidents; perform root cause analysis, lifecycle maintenance, capacity planning, and performance tuning.
Technical Documentation & Briefings: Produce and maintain network designs, architecture diagrams, implementation plans, change management documentation, and after-action reports; present technical findings and recommendations.
Mentorship & Standards: Provide technical mentorship to junior engineers and contribute to the development of organizational engineering standards, playbooks, and best practices.