Senior Network Engineer

Concept Plus, LLC•Baltimore, MD

About The Position

Concept Plus is seeking a Senior Network Engineer to design, implement, and operate a hybrid network spanning AWS, Oracle Cloud Infrastructure (OCI), and an on-premises data center for a client. The role focuses on secure connectivity among these environments, faster tenant onboarding into OCI, and troubleshooting complex cross-environment issues while meeting federal security and compliance requirements.

Requirements

  • Must be a U.S. citizen.
  • At least 6 years of enterprise network engineering experience, including designing hybrid cloud networks.
  • Hands-on production networking experience in both AWS and OCI.
  • Expert-level BGP knowledge; strong OSPFv2/v3 knowledge; IPv4 and IPv6 experience.
  • Experience with site-to-site and remote-access VPN.
  • Experience designing networks in a federal environment, including FISMA / NIST 800-53.
  • Ability to obtain and maintain a Public Trust Clearance.

Nice To Haves

  • CCNP (Enterprise or Security); CCIE is a plus.
  • AWS Certified Advanced Networking – Specialty and/or OCI Networking Professional.
  • Terraform; Python or Ansible.
  • MACsec, VXLAN/EVPN, and QoS.
  • TIC 3.0 or federal Zero Trust implementation experience.

Responsibilities

  • Design and implement connectivity between the data center, AWS, and OCI using Direct Connect, FastConnect, Transit Gateway, DRG, and IPsec VPN, including BGP policy, redundancy, and failover.
  • Design and deploy tenant network architectures, including VCN/VPC, hub-and-spoke, segmentation, and hybrid DNS, to speed up OCI onboarding.
  • Support maintenance of network as code using Terraform and automate routine configuration and validation.
  • Implement network security controls, including firewalls, segmentation, IPsec and MACsec encryption, and a Zero Trust architecture aligned with OMB M-22-09 and TIC 3.0.
  • Diagnose and resolve complex issues across on-premises and cloud environments.
  • Maintain network diagrams and documentation for the security authorization process under NIST 800-53 and CMS AR.
  • Recommend improvements, plan capacity, and support IPv6 adoption.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service