Senior Network Engineer - TS/SCI

Parsons Corporation•Centreville, VA

18h•$103,500 - $181,100•Hybrid

About The Position

Parsons is looking for an amazingly talented Senior Network Engineer to join our team! In this role, you will design, implement, secure, and sustain enterprise network infrastructure supporting classified hybrid environments that span on-premises data center and server room infrastructure as well as multiple cloud environments. You will own the network end to end, from physical switching and routing in secure facilities to the hybrid connectivity that extends the enterprise into the cloud. This is a hands-on engineering role on a mission-critical program where your work directly contributes to matters of national security.

Requirements

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline; additional years of relevant experience may be considered in lieu of a degree
8+ years of progressive network engineering experience designing and operating enterprise LAN/WAN environments
Expert-level knowledge of TCP/IP, routing and switching (BGP, OSPF, VLANs, trunking), and network security principles
Hands-on experience configuring and hardening Cisco enterprise network equipment in accordance with DoD STIGs
Experience supporting networks in classified, air gapped, or other secure DoD/IC environments
Cisco CCNA/CCNP (Enterprise or Security) or equivalent professional-level network certification
Strong documentation skills, including the ability to create detailed engineering specifications and network diagrams
Active TS/SCI security clearance

Nice To Haves

Experience engineering hybrid cloud connectivity to Microsoft Azure or Azure Government (ExpressRoute, VPN gateways, hub-and-spoke VNet design)
Experience with next-generation firewalls (Palo Alto, Cisco Firepower) and network access control solutions
Familiarity with ICD 705 / SCIF infrastructure requirements and secure facility network buildouts
Experience with network automation and infrastructure-as-code (Python, Ansible, Terraform)
Knowledge of Type 1 encryption devices (e.g., TACLANE) and classified transport solutions
CCIE, Azure Network Engineer Associate (AZ-700), or CISSP certification
Experience supporting RMF authorization activities and DCSA or other government security assessments

Responsibilities

Design, configure, deploy, and maintain LAN/WAN infrastructure including Cisco routers and switches (Catalyst/Nexus), firewalls, and load balancers across classified on-premises environments
Engineer and sustain hybrid connectivity between on-premises networks and Microsoft Azure, including VPN gateways, ExpressRoute, virtual network (VNet) architecture, routing, and network security groups in coordination with the cloud engineering team
Implement and maintain routing and switching protocols and services (BGP, OSPF, EIGRP, VLANs, trunking, spanning tree, HSRP/VRRP, QoS)
Harden network devices in accordance with DoD STIGs and maintain compliance evidence in support of RMF assessment and authorization activities
Design and support air gapped and classified network segments, including secure boundary architectures and cross-domain considerations
Perform network performance monitoring, capacity planning, troubleshooting, and root-cause analysis using enterprise monitoring tools
Develop and maintain network documentation including topology diagrams, IP address management (IPAM), configuration baselines, and change records
Support physical infrastructure efforts including rack layout, cable plant standards, and connectivity for secure facility buildouts
Participate in change and configuration management processes, design reviews, and security assessments; mentor junior engineers