Senior Network Engineer

JCS Solutions LLC•Fort Belvoir, VA

14d•$70,000 - $104,000•Onsite

About The Position

JCS Solutions is seeking a Senior Network Engineer to support its teaming partner, Leidos, in designing, implementing, modernizing, and sustaining enterprise network infrastructure in a fast-paced DoD environment. The role provides engineering expertise for mission-critical LAN, WAN, and secure network infrastructure supporting classified and enterprise operations. The engineer works independently and with multidisciplinary engineering teams to deliver secure, resilient, and scalable network solutions as customer mission needs change. Strong Cisco routing and switching skills and hands-on Palo Alto Networks firewall experience are essential. The position is located at Ft. Belvoir, Virginia, and requires an active TS/SCI clearance, U.S. citizenship, and an active DoD 8140/8570 IAT Level II certification. The role is full-time with flexible hours, including availability for off-hours work when needed to support installations and migrations. The stated salary range is $70,000 to $104,000. JCS Solutions provides technology and professional services in defense, national security, and civilian sectors, including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. The company describes its culture as collaborative, inclusive, and innovative, and states that it is certified as a Great Place to Work and a Top Place to Work.

Requirements

Active TS/SCI security clearance and U.S. citizenship.
Extensive experience designing, implementing, and supporting enterprise Cisco network infrastructure.
Strong working knowledge of TCP/IP, IPv4/IPv6, DDI (DNS/DHCP/IPAM), NAT, VLANs, copper and fiber optic cabling standards, QoS, OSPF, MPLS, and SASE technologies.
Hands-on experience configuring and administering Palo Alto Networks next-generation firewalls, including security policies, NAT, threat prevention, and GlobalProtect.
Experience implementing and supporting secure remote-access and site-to-site VPN technologies.
Demonstrated experience troubleshooting enterprise LAN and WAN environments.
Experience supporting networking solutions within a fast-paced DoD enterprise.
Excellent written, verbal, and interpersonal communication skills.
Ability to manage multiple priorities while working independently and as part of a technical team.
Active DoD 8570/8140 IAT Level II certification. Qualifying certifications listed include CASP+ CE, CCNA-Security, CCNP Security, CCSP, CISA, CISSP or Associate, CND, CySA+, GCED, GCIH, GICSP, GSEC, Security+ CE, SSCP, or active Cisco Certified Network Associate (CCNA).
Bachelor’s degree in computer science, information technology, engineering, or a related discipline with 8 or more years of relevant experience; alternatively, a master’s degree with 6 or more years of relevant experience. A doctorate in a technical domain is acceptable.

Nice To Haves

Cisco Certified Network Professional (CCNP).
Experience with BGP and advanced SD-WAN architectures.
Experience deploying and supporting Versa Networks or similar SD-WAN solutions.
Network automation experience with Python, Ansible, and Infrastructure-as-Code (IaC).
Familiarity with Network Access Control and Comply-to-Connect technologies, such as Cisco ISE and IEEE 802.1X.
Experience with enterprise network monitoring platforms, such as SolarWinds or PRTG.
Experience supporting hybrid cloud networking in Microsoft Azure and/or AWS.
Knowledge of the DoD Risk Management Framework (RMF), STIGs, and Zero Trust networking principles, including SD-WAN, micro- and macro-segmentation, and Zero Trust Network Access (ZTNA).
Familiarity with break-and-inspect, reverse web proxy, and other application-based firewall features.
Experience reviewing packet capture data for troubleshooting and analysis.
Experience supporting on-premises virtualization platforms, such as VMware vSphere.

Responsibilities

Design, implement, configure, and maintain enterprise LAN and WAN infrastructure.
Engineer and support Cisco routing and switching environments for mission-critical networks.
Configure, troubleshoot, and optimize routing and switching technologies, including OSPF, BGP, VLANs, Spanning Tree Protocol (STP), and HSRP/VRRP.
Support WAN connectivity over MPLS, VPN, and Internet-based transport.
Configure, administer, and maintain Palo Alto Networks next-generation firewalls.
Design, implement, and support secure Palo Alto GlobalProtect remote access and site-to-site VPN solutions.
Monitor network health, analyze performance, identify bottlenecks, and implement corrective actions.
Perform advanced Layer 1–7 troubleshooting using industry-standard diagnostic tools.
Develop and maintain engineering documentation, implementation plans, network diagrams, and standard operating procedures.
Participate in technology refreshes, network modernization efforts, and infrastructure upgrades.
Work with cybersecurity staff to ensure compliance with DoD cybersecurity policies, RMF requirements, and applicable STIGs.
Support scheduled maintenance, incident response, and operational troubleshooting in a high-availability environment.
Be available for off-hours work when needed to support installations and migrations.