Senior Network Engineer- W2 Consultants
About The Position
Serve as a hands-on senior engineer on HRSA’s enterprise network team, working with the technical lead, project managers, and HRSA stakeholders. Design, plan, implement, and maintain enterprise LAN/WAN, Zscaler, and network security infrastructure, including routers, switches, firewalls, and remote access systems. Configure and manage Cisco ASA/Firepower and Palo Alto firewalls through Panorama, Cisco switches, and remote access systems to support secure, scalable operations. Implement and support RSA SecurID/RSA Authentication Manager integrated with VPN, RADIUS, and LDAP, as well as Cisco Identity Services Engine (ISE). Troubleshoot complex network, VPN, and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana, and Cribl. Design, implement, and troubleshoot IPv4 and IPv6 network architectures, and manage Azure network security groups (NSGs). Perform Cisco switch and firewall software upgrades, vulnerability remediation, and TLS certificate renewals during scheduled maintenance windows under change management. Maintain network-security SOPs, network diagrams, and technical documentation; support backup, recovery, and federal and HHS policy compliance. Support network upgrades, technology refreshes, and new-technology evaluations, and assist with hardware, software, and vendor procurement. The role is onsite in Rockville, Maryland, Monday through Friday during business hours. Scheduled maintenance windows may occur in the evening, with upgrades on weekends and some Fridays. Onsite after-hours or weekend maintenance is expected about every nine weeks, and participation in an on-call rotation is expected about every ten weeks. The start date is immediate.
Requirements
- Bachelor’s degree or an equivalent combination of education and experience.
- At least 8 years of network engineering experience in federal or enterprise-level IT environments.
- Experience with Cisco ASA 5500/Firepower firewalls; this is required.
- Experience with Palo Alto firewalls managed with Panorama.
- Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; and IPv4 and IPv6.
- Expert troubleshooting of complex network issues, including PCAP analysis with Wireshark.
- Experience with Zscaler, Cisco IPsec VPN troubleshooting, and Cisco ISE.
- Experience with RSA SecurID/RSA Authentication Manager and RADIUS and LDAP network authentication protocols.
- Azure networking experience with network security groups (NSGs).
- Experience with SolarWinds, including automation scripts, and Riverbed, Grafana, or Cribl for monitoring and troubleshooting.
- Experience with vulnerability remediation, TLS certificate renewal and installation, and change management processes.
- Ability to write, maintain, and implement network-security SOPs and technical documentation.
- Willingness to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation.
- Strong problem-solving, communication, and organizational skills.
- Ability to pass a Public Trust (NACI/Tier 1) investigation.
- Must have lived in the U.S. for at least 3 of the last 5 years.
Nice To Haves
- Experience supporting HHS or other federal civilian agency networks.
- Current or recent federal Public Trust investigation.
- CCNP, Palo Alto PCNSE, Zscaler, or Cisco ISE certifications.
- NetScaler/Citrix ADC exposure.
Responsibilities
- Design, plan, implement, and maintain enterprise LAN/WAN, Zscaler, and network security infrastructure.
- Configure and manage Cisco ASA/Firepower and Palo Alto (Panorama) firewalls, Cisco switches, and remote access systems.
- Implement and support RSA SecurID/RSA Authentication Manager integrated with VPN, RADIUS, and LDAP, and support Cisco ISE.
- Troubleshoot complex network, VPN, and authentication issues using Wireshark packet captures and monitoring/troubleshooting tools.
- Design, implement, and troubleshoot IPv4 and IPv6 network architectures and manage Azure network security groups.
- Perform Cisco switch and firewall software upgrades, vulnerability remediation, and TLS certificate renewals during scheduled maintenance windows under change management.
- Maintain network-security SOPs, network diagrams, and technical documentation; support backup, recovery, and federal and HHS policy compliance.
- Support network upgrades, technology refreshes, and new-technology evaluations, and assist with hardware, software, and vendor procurement.
- Work onsite after hours and on weekends for maintenance windows and participate in the on-call rotation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
