United States
Be Structured Technology Group
Shrive Technologies LLC
Senior Network Engineer- W2 Consultants
United States
Montgomery County, Maryland, United States
About the opportunity
Job Title: Senior Network Engineer
Location: Onsite, Rockville, MD
Required Qualifications
Certification: None required; CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco ISE certifications preferred
- Bachelor’s degree or an equivalent combination of education and experience.
- 8+ years of network engineering experience in federal or enterprise-level IT environments.
- Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
- Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
- Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
- Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
- RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
- Azure networking with network security groups (NSGs).
- SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
- Vulnerability remediation, TLS certificate renewal and installation, and change management processes.
- Writing, maintaining and implementing network-security SOPs and technical documentation (required).
- Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
- Strong problem-solving, communication and organizational skills.
- Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.
Work Schedule: Onsite Monday–Friday, business hours. Scheduled maintenance windows (e.g., Tuesdays 6–8 p.m. ET), with upgrades on weekends and some Fridays; onsite after-hours/weekend maintenance about every 9 weeks; on-call rotation about every 10 weeks
Start Date: Immediate
Job Summary
- Serve as a hands-on senior engineer on HRSA’s enterprise network team, working with the technical lead, project managers and HRSA stakeholders.
- Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
- Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations.
- Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE).
- Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl.
- Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
- Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management.
- Maintain network-security SOPs, network diagrams and technical documentation, support backup, recovery and federal and HHS policy compliance.
- Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement.
Preferred Qualifications
- Experience supporting HHS or other federal civilian agency networks.
- Current or recent federal Public Trust investigation.
- CCNP, Palo Alto PCNSE, Zscaler or Cisco ISE certifications.
- NetScaler / Citrix ADC exposure.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile