Sr. Network Engineer

INSPYR Solutions • Beaverton, OR

4d

About The Position

INSPYR Solutions is seeking a Senior Network Engineer to design, implement, secure, and support enterprise network infrastructure across LAN/WAN/WiFi, datacenters, and cloud connectivity within a CMMC-regulated environment. The role requires deep enterprise networking expertise and hands-on experience supporting NIST 800-171 controls and CUI boundary protection.

The engineer will manage network infrastructure and security, support compliance and assessment activities, maintain documentation, troubleshoot service issues, and lead infrastructure projects. The position also designs and supports AWS and Azure networking, secure hybrid connectivity, and cloud segmentation for CUI workloads. The engineer partners with cloud engineering and compliance/GRC teams, works with service providers, mentors junior engineers, and participates in on-call rotation and after-hours maintenance.

Requirements

• Bachelor's degree in IT or Computer Science, or equivalent experience.
• At least 7 years of hands-on enterprise network engineering experience.
• Demonstrated experience supporting a network environment under CMMC, NIST 800-171, or DFARS 252.204-7012 requirements, including implementation or assessment support rather than familiarity alone.
• Strong knowledge of Cisco routing and switching, TCP/IP, subnetting, DNS, DHCP, and InfoBlox.
• Knowledge of WAN technologies, including DMVPN, SD-WAN, DIA, and broadband.
• Experience with wireless networking, including Cisco or Meraki.
• Experience with Palo Alto or Cisco ASA/FTD firewalls, site-to-site and remote-access VPNs, and network segmentation in regulated/CUI environments.
• Strong troubleshooting skills using packet capture tools such as Wireshark or tcpdump.
• Experience contributing to or supporting SSP, POA&M, or CMMC assessment documentation.
• Excellent communication and stakeholder management skills.
• Must be a U.S. citizen, Green Card holder, or authorized to work in the U.S.

Nice To Haves

• CMMC RP, CCP, or CCA credential, or actively pursuing one.
• CCNP or CCIE certification in Enterprise or Security.
• PCNSE or NSE certification.
• SD-WAN experience, such as Viptela.
• Automation experience with Python, Ansible, Terraform, or API-based networking.
• NAC experience with Cisco ISE or ClearPass.
• Prior experience on a DoD or federal contractor network supporting an active CMMC assessment cycle.

Responsibilities

• Design, implement, and maintain enterprise LAN/WAN/WLAN infrastructure aligned with CMMC and NIST 800-171 requirements.
• Manage and optimize routing and switching environments, including SD-WAN, SDA, BGP, OSPF, EIGRP, VLANs, STP, and HSRP/VRRP.
• Configure and support firewalls, VPNs, and security controls that enforce CUI boundary segmentation.
• Design and maintain network architecture for CUI enclaves, including access control, encryption in transit, and audit logging in accordance with NIST 800-171 and DFARS 252.204-7012.
• Lead network upgrades, migrations, and infrastructure projects while accounting for compliance boundary impacts.
• Troubleshoot network performance issues and outages and perform root cause analysis.
• Monitor network health using SolarWinds, ThousandEyes, or similar tools, including compliance-relevant traffic visibility and alerting.
• Maintain network documentation, including diagrams, IP schemas, standards, runbooks, and network artifacts for the System Security Plan (SSP).
• Support CMMC self-assessments or C3PAO assessments by providing network evidence, diagrams, and control narratives.
• Coordinate with service providers on circuit turn-ups, troubleshooting, and escalations.
• Ensure high availability, redundancy, and disaster recovery readiness.
• Mentor junior engineers and provide technical guidance.
• Participate in an on-call rotation and after-hours maintenance.
• Design and support AWS and Azure cloud network architectures, including VPCs, Transit Gateways, route tables, NACLs, security groups, VNets, VNet peering, UDRs, NSGs, and cloud firewalls.
• Implement secure hybrid connectivity using IPsec site-to-site VPN, AWS Direct Connect, and Azure ExpressRoute.
• Implement cloud segmentation and secure routing patterns for CUI-handling workloads.
• Support cloud security integrations, including centralized logging and monitoring, network traffic visibility, and alerting mapped to NIST 800-171 controls.
• Partner with cloud engineering and compliance/GRC teams to ensure compliant connectivity for CUI workloads.

What This Job Offers

• Career Level: Senior