Systems Engineer Architect Senior

Cb•Ft Belvoir, VA

2d•Onsite

About The Position

SarelaTech is seeking a Senior Network Engineer to support the design, implementation, modernization, and sustainment of enterprise network infrastructure in a Department of Defense environment. The role is based in Fort Belvoir, Virginia, or Albuquerque, New Mexico, and supports mission-critical LAN, WAN, and secure network infrastructure for classified and enterprise operations. The engineer will apply expertise in Cisco networking, Palo Alto Networks security solutions, and enterprise routing and switching, working independently and with multidisciplinary engineering teams to deliver secure, resilient, and scalable network solutions. An active TS/SCI clearance is listed for the position; the qualifications section requires an active Secret clearance and the ability to obtain and maintain Top Secret clearance with SCI eligibility.

Requirements

Bachelor’s degree in computer science, information technology, engineering, or a related discipline, with 8 or more years of relevant experience; additional years of experience may substitute for a degree.
Active DoD 8570/8140 IAT Level II certification, such as Security+, CySA+, or equivalent.
Active Cisco Certified Network Associate (CCNA) certification.
Active Secret security clearance and ability to obtain and maintain Top Secret clearance with SCI eligibility.
Extensive experience designing, implementing, and supporting enterprise Cisco network infrastructure.
Strong working knowledge of TCP/IP, IPv4/IPv6, DDI (DNS/DHCP/IPAM), NAT, VLANs, copper and fiber optic cabling standards, QoS, OSPF, MPLS, and SASE technologies.
Hands-on experience configuring and administering Palo Alto Networks next-generation firewalls, including security policies, NAT, threat prevention, and GlobalProtect.
Experience implementing and supporting secure remote-access and site-to-site VPN technologies.
Demonstrated experience troubleshooting enterprise LAN and WAN environments.
Experience supporting networking solutions within a fast-paced Department of Defense enterprise.
Excellent written, verbal, and interpersonal communication skills.
Ability to manage multiple priorities while working independently and as part of a technical team.

Nice To Haves

Cisco Certified Network Professional (CCNP) certification.
Experience with BGP and advanced SD-WAN architectures.
Experience deploying and supporting Versa Networks or similar SD-WAN solutions.
Experience with network automation using Python, Ansible, and Infrastructure-as-Code technologies.
Familiarity with Network Access Control and Comply-to-Connect technologies such as Cisco Identity Services Engine (ISE) and IEEE 802.1X authentication.
Experience with enterprise network monitoring platforms such as SolarWinds or PRTG.
Experience supporting hybrid cloud networking in Microsoft Azure and/or AWS environments.
Knowledge of DoD RMF, STIGs, and Zero Trust networking principles, including SD-WAN, micro- and macro-segmentation, and ZTNA.
Familiarity with break-and-inspect, reverse-web-proxy, and other application-based firewall features.
Experience reviewing packet capture data for troubleshooting and packet analysis.
Experience supporting on-premises virtualization platforms such as vSphere.

Responsibilities

Design, implement, configure, and maintain enterprise LAN and WAN infrastructure.
Engineer and support Cisco routing and switching environments for mission-critical networks.
Configure, troubleshoot, and optimize routing and switching technologies, including OSPF, BGP, VLANs, STP, and HSRP/VRRP.
Support WAN connectivity using MPLS, VPN, and Internet-based transport technologies.
Configure, administer, and maintain Palo Alto Networks next-generation firewalls.
Design, implement, and support Palo Alto GlobalProtect remote access and site-to-site VPN solutions.
Monitor network health, analyze performance, identify bottlenecks, and implement corrective actions.
Perform advanced Layer 1–7 network troubleshooting using industry-standard diagnostic tools.
Develop and maintain engineering documentation, implementation plans, network diagrams, and standard operating procedures.
Participate in technology refreshes, network modernization efforts, and infrastructure upgrades.
Collaborate with cybersecurity personnel to ensure compliance with DoD cybersecurity policies, RMF requirements, and applicable STIGs.
Support scheduled maintenance activities, incident response, and operational troubleshooting in a high-availability environment.