Senior Network Engineer

Job Description

Westat is a leader in research, data collection and analysis, technical assistance, evaluation, and communications. Our evidence-based findings help clients in government and the private sector accelerate advancements in health, education, transportation, and social and economic policy. Our dedication to improving lives through research and our approach to projects grounded in investigative curiosity, statistical and data rigor, adaptive methods, and advanced technology are why clients find exceptional value in our work.

The Senior Network Engineer is responsible for designing, implementing, and maintaining the organization's enterprise network infrastructure. This role ensures high availability, performance, and security of network systems across data centers, cloud environments, and remote offices. The ideal candidate will possess deep technical expertise, strong problem‑solving skills, and the ability to lead network projects and mentor junior engineers.

Join us at our new Bethesda, Maryland headquarters! This modern space fosters our collaborative culture with a mix of open areas for teamwork and private offices for focused work. This position will be on‑site 5 days per week.

• Design scalable and secure network solutions for LAN, WAN, WLAN, cloud environments, and remote access.
• Evaluate and recommend new technologies to improve network performance and reliability.

• Configure and maintain routers, switches, firewalls, VPNs, and wireless access points.
• Monitor network performance and troubleshoot issues using advanced diagnostic tools.

• Implement network security protocols and ensure compliance with industry standards (e.g., ISO, NIST, HIPAA).
• Manage firewalls, intrusion detection/prevention systems, and access control policies.

• Lead network infrastructure projects including upgrades, migrations, and expansions.
• Collaborate with cross‑functional teams to support business initiatives.

• Maintain detailed documentation of network configurations, diagrams, and procedures.
• Provide regular reports on network health, performance metrics, and incident resolution.

• Provide technical guidance to junior engineers and support staff.
• Serve as an escalation point for complex network issues.

• 10+ years of experience in network engineering or infrastructure roles.
• Professional certifications such as CCNP, CCIE, Fortinet NSE, or equivalent.
• Expertise in Cisco, Juniper, Palo Alto, Fortinet, or similar technologies.
• Strong knowledge of TCP/IP, BGP, VXLAN, OSPF, MPLS, VLANs, and VPNs.
• Experience with cloud networking (AWS, Azure, GCP) and SD‑WAN solutions.
• Familiarity with network monitoring tools (e.g., Solar Winds, PRTG, Wireshark, Whatsup Gold).
• Demonstrated communication, documentation, and leadership skills.

• Bachelor’s degree in Computer Science, Information Technology, or related field (Master’s preferred).
• Experience with automation and scripting (Python, Ansible).
• Experience with Web Application Firewalls.
• Knowledge of VoIP, QoS, and unified communications.
• Understanding of Zero Trust architecture and network segmentation.

• Employee Stock Ownership Plan
• 401(k) Retirement Plan
• Paid Parental Leave
• Vacation Leave (20 days per year)
• Sick Leave (9 days per year)
• Holiday Leave (7 government holidays and 2 floating holidays)
• Professional Development
• Health Advocate
• Employee Assistance Program
• Travel Accident Insurance
• Medical Insurance
• Dental Insurance
• Vision Insurance
• Short Term Disability Insurance
• Long Term Disability Insurance
• Life and AD&D Insurance
• Critical Illness Insurance
• Supplemental Life Insurance
• Flexible Spending Account
• Health Savings Account

Any offer of employment may be contingent upon receipt of acceptable results from a post‑offer background screening, if required for the specific position, which may include, for example, identity verification, employment history, motor vehicle driving record history, and criminal or sexual offender records history. Any background screening results will be evaluated through an individualized…