Senior Network Engineer (Cisco / Zero Trust Architecture Lead)

Omm IT Solutions•Washington, WA

1d•Hybrid

About The Position

We are seeking an elite Senior Network Engineer to serve as Key Personnel, providing advanced engineering, operational, and advisory support for the Client Cisco network environment. The primary objective of this role is to strengthen the security, reliability, and resilience of the network infrastructure while actively driving the remediation of identified Incident Response (IR) findings. You will design, implement, and maintain secure network architectures across core, distribution, access, and edge layers.

Requirements

Must be a U.S. Citizen or hold Permanent Residence Status.
Must hold active, highly relevant IT networking and security certifications (e.g., CCNP, CCNA, Security+, or equivalent) that have been actively maintained for a minimum of 5 years.
Proven history operating as a Senior Engineer or Architect designing Cisco network infrastructures and leading audit/compliance reviews (NIST SP 800-53 and SP 800-207).

Responsibilities

Design, implement, operate, and optimize the CBO's Cisco-based network infrastructure to ensure high availability and resilience.
Engineer and enforce Zero Trust network architecture principles in accordance with NIST SP 800-207, including establishing secure network segmentation and micro-segmentation strategies.
Serve as a senior technical advisor to CBO stakeholders, collaborating with cloud, Microsoft engineering, and cybersecurity teams to resolve complex network issues.
Lead or participate in security assessments, audits, and compliance reviews, providing essential evidence and remediation support.
Implement network monitoring and alerting capabilities, integrating them with enterprise SIEM and Network Detection and Response (NDR) tools.
Actively support incident response activities by providing network-level analysis, containment actions, and forensic data collection.
Secure public-facing and perimeter network assets by implementing strict ingress/egress filtering, firewall rule optimization, and multi-factor authentication for administrative access.
Engineer and enforce secure network access controls, integrating 802.1X port-based authentication and role-based access with enterprise identity services.
Establish and maintain a structured program for network device patching, firmware updates, and lifecycle management.
Continuously conduct vulnerability assessments and coordinate remediation in alignment with the NIST Risk Management Framework (RMF).
Manage routing, switching, and network services (VLANs, DNS, DHCP, VPNs) ensuring optimal performance.
Serve as the primary administrator troubleshooting enterprise DNS services.