Senior Network Engineer - TS​/SCI Security Clearance

Position: Senior Network Engineer - TS/SCI with Security Clearance
In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description:

Parsons is looking for an amazingly talented Senior Network Engineer to join our team! In this role, you will design, implement, secure, and sustain enterprise network infrastructure supporting classified hybrid environments that span on-premises data center and server room infrastructure as well as multiple cloud environments. You will own the network end to end, from physical switching and routing in secure facilities to the hybrid connectivity that extends the enterprise into the cloud.

This is a hands-on engineering role on a mission-critical program where your work directly contributes to matters of national security. What You'll Be Doing
* Design, configure, deploy, and maintain LAN/WAN infrastructure including Cisco routers and switches (Catalyst/Nexus), firewalls, and load balancers across classified on-premises environments

* Engineer and sustain hybrid connectivity between on-premises networks and Microsoft Azure, including VPN gateways, Express Route, virtual network (VNet) architecture, routing, and network security groups in coordination with the cloud engineering team

* Implement and maintain routing and switching protocols and services (BGP, OSPF, EIGRP, VLANs, trunking, spanning tree, HSRP/VRRP, QoS)

* Harden network devices in accordance with DoD STIGs and maintain compliance evidence in support of RMF assessment and authorization activities

* Design and support air gapped and classified network segments, including secure boundary architectures and cross-domain considerations

* Perform network performance monitoring, capacity planning, troubleshooting, and root-cause analysis using enterprise monitoring tools

* Develop and maintain network documentation including topology diagrams, IP address management (IPAM), configuration baselines, and change records

* Support physical infrastructure efforts including rack layout, cable plant standards, and connectivity for secure facility buildouts

* Participate in change and configuration management processes, design reviews, and security assessments; mentor junior engineers
What Required Skills You'll Bring
* Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline; additional years of relevant experience may be considered in lieu of a degree

* 8+ years of progressive network engineering experience designing and operating enterprise LAN/WAN environments

* Expert-level knowledge of TCP/IP, routing and switching (BGP, OSPF, VLANs, trunking), and network security principles

* Experience with cloud networking and hybrid cloud (cloud plus physical on-premises network equipment)
* Cisco IOS-XE experience and scripting on routers
* Network performance tuning, especially in VPN tunnel environments
* Hands-on experience configuring and hardening Cisco enterprise network equipment in accordance with DoD STIGs

* Experience supporting networks in classified, air gapped, or other secure DoD/IC environments

* Cisco CCNA/CCNP (Enterprise or Security) or equivalent professional-level network certification

* Strong documentation skills, including the ability to create detailed engineering specifications and network diagrams

* Active TS/SCI security clearance
What Desired Skills You'll Bring
* Experience engineering hybrid cloud connectivity to Microsoft Azure or Azure Government (Express Route, VPN gateways, hub-and-spoke VNet design)

* Experience with next-generation firewalls (Palo Alto, Cisco Firepower) and network access control solutions

* Familiarity with ICD 705 / SCIF infrastructure requirements and secure facility network buildouts

* Experience with network automation and infrastructure-as-code (Python, Ansible, Terraform)

* Knowledge of Type 1 encryption devices (e.g., TACLANE) and classified transport solutions

* CCIE, Azure Network Engineer Associate (AZ-700), or CISSP certification

* Experience supporting RMF authorization activities and DCSA or other government security assessments Security Clearance Requirement:
An active Top Secret SCI security clearance is required for this position. This position is part of our Federal Solutions team. The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental.

We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace.…