Senior Network Engineer IRES - SSFB​/HSV​/FBEL

Position Title:

Senior Network Engineer

Location:

Schriever Space Force Base, Colorado Springs, CO;
Redstone Arsenal, Huntsville, AL or Fort Belvoir, VA Relocation Assistance:
None available at this time Remote/Telework: NO
- Not available for this position Clearance Type:
DoW Secret

Shift: Day shift

Travel Required:

Up to 10% of the time Description of Duties

As a Senior Network Engineer supporting the Next Generation Environment (NGE) on the Integrated Research and Development for Enterprise Solutions (IRES) contract, you will serve as a senior technical contributor responsible for engineering, configuring, implementing, and securing the high-speed data center fabrics and software-defined network enclaves underpinning the Missile Defense Agency’s (MDA) unified digital environment.

In this role, you will turn high-level architectural designs into resilient, automated network solutions by configuring Cisco Nexus Spine-Leaf EVPN-VxLAN fabrics, VMware NSX software-defined networks, Versa SD-WAN edge transport, F5 BIG-IP application delivery controllers, and Infoblox enterprise DDI services. You will collaborate across engineering, systems architecture, systems security, multi-contractor consortium performers, and Government stakeholder teams to deliver cohesive hybrid cloud and on-premises network transport.

You will play a key role in standardizing infrastructure automation, resolving complex tier-3/4 routing issues, enforcing Zero Trust boundaries, and ensuring continuous network compliance with DoD, DISA, and MDA security requirements.

Data Center Fabric Engineering

• Configure, deploy, and administer Cisco Nexus (NX-OS) switches operating in high-performance Spine-Leaf topologies.
• Build, maintain, and optimize EVPN-VxLAN virtual overlay networks, Multi-Site fabrics, vPC domains, and complex underlay routing baselines.

Software-Defined Networking & Micro-segmentation

• Deploy, configure, and manage VMware NSX components including NSX Edge nodes, Tier-0 and Tier-1 logical gateways, and distributed firewalls.
• Implement policy-driven micro-segmentation rules within virtualized compute environments (vSphere/VCF) to isolate mission workloads and support multi-tenant enclaves.

Application Delivery & Load Balancing

• Deploy, configure, and maintain F5 BIG-IP physical and virtual appliances, specifically Local Traffic Managers (LTM) and Global Traffic Managers (GTM).
• Author and troubleshoot custom F5 iRules, and configure virtual servers, load-balancing pools, health monitors, and secure SSL/TLS decryption profiles.

SD-WAN & Edge Connectivity

• Provision, deploy, and maintain Versa SD-WAN edge appliances (including Director, Analytics, and VOS) to establish secure transport across disparate WAN paths.
• Configure secure tunneling, dynamic traffic steering rules, QoS queue policies, and security boundaries for remote sites and tactical test networks.

Core DDI & IPAM Administration

• Administer enterprise-wide IP Address Management (IPAM), authoritative internal DNS zones, and DHCP scopes utilizing Infoblox Grid Manager.
• Support the automation of DNS records and IP allocation using Infoblox APIs integrated with Infrastructure-as-Code pipelines.

Zero Trust & Network Security Hardening

• Implement identity-aware access controls, 802.1X network access control (NAC), and FIPS-compliant cryptography tunnels (IPsec/MACsec).
• Harden all network assets in accordance with DISA STIGs, Risk Management Framework (RMF) guidelines, and MDA cybersecurity requirements to support continuous ATO (cATO).

Consortium & Program Integration (Program-Facing)

• Coordinate and collaborate directly with external contractor performers and systems administrators across the program consortium during joint integration events, lab setups, and production cutovers.
• Author and execute comprehensive Low-Level Designs (LLDs), Interface Control Documents (ICDs), standard operating procedures (SOPs), deployment runbooks, and cutover plans.

Automation, Dev Sec Ops  & Scripting

• Develop and sustain Infrastructure-as-Code (IaC) playbooks and configuration management scripts (Ansible, Terraform, Python, Bash) to automate configuration deployments, perform validation checks, and remediate compliance drift.

Basic Requirements

• Must have 12, or more, years of general (full-time) work experience
• May be reduced with completion of advanced education
• Must have 6, or more, years of directly related experience
• Must have 1, or more, years of experience working in a management or leadership role
• Must have demonstrated, hands-on,…