Onsite Network Engineer: SD-WAN, Firewalls & VPNs

Job Title: Network Engineer
Location: Richmond, VA 23219
Duration: 6+ Months

Location: Onsite
Local Candidates strongly preferred
In-person interview

The Client seeks a Network Engineer to support and maintain a secure, stable, and high-performing enterprise network environment. This role is responsible for administering and troubleshooting core networking infrastructure across multiple office locations, data centers, and remote access environments.

The Network Engineer is a hands‑on technical role responsible for routing, switching, firewalls, VPN connectivity, wireless infrastructure, and network resiliency. The position works under the direction of the Director of Infrastructure & Operations and collaborates with Infrastructure, Information Security, End User Services, Application/Data Services, vendors, and service providers.

This role emphasizes operational discipline, secure network design, structured change management, and reliable service delivery within a government environment.

• Administer enterprise routing and switching infrastructure.
• Configure and maintain LAN, WAN, wireless, and remote access environments.
• Support hybrid MPLS and SD‑WAN connectivity across multiple locations.
• Maintain network availability, resiliency, and performance.

• Administer firewalls, VPN solutions, and secure remote connectivity.
• Implement and maintain network segmentation and access controls.
• Support secure connectivity for cloud and hybrid environments.
• Coordinate firewall rule changes and network security updates.

• Monitor network health, utilization, and performance.
• Respond to outages, connectivity issues, and infrastructure incidents.
• Perform network troubleshooting across routing, switching, wireless, and VPN environments.
• Conduct root cause analysis and implement corrective actions.

• Support implementation of network security controls and standards.
• Collaborate with the Information Security Office on vulnerability remediation and risk reduction.
• Assist with logging, monitoring, and audit activities.
• Support secure configuration and hardening practices.

• Execute network changes through defined change management processes.
• Validate planned changes and maintain rollback procedures.
• Participate in maintenance windows and operational planning.
• Maintain network documentation and diagrams.

• Coordinate with telecommunications providers and vendors.
• Support circuit provisioning, troubleshooting, and escalations.
• Assist with hardware lifecycle and support renewals.

• Partner with Systems Administration on infrastructure dependencies.
• Coordinate with End User Services regarding user‑impacting network issues.
• Support Application/Data teams with connectivity and performance needs.
• Communicate operational risks and system impacts to leadership.

• Experience administering enterprise network environments.
• Strong knowledge of routing and switching concepts.
• Experience with firewalls, VPNs, and secure remote access.
• Experience troubleshooting network connectivity and performance issues.
• Familiarity with wireless networking technologies.
• Understanding of structured operational and change management processes.

• Experience with Cisco networking technologies.
• Experience with SD‑WAN and hybrid network environments.
• Experience in government or regulated environments.
• Familiarity with network monitoring and logging tools.
• Knowledge of security frameworks such as NIST.
• Relevant certifications such as CCNA or CCNP.

• Strong troubleshooting and analytical skills.
• Ability to manage multiple operational priorities.
• Effective written and verbal communication skills.
• Ability to work collaboratively across technical teams.
• Focus on reliability, security, and operational consistency.

• Office-based environment.
• Occasional after‑hours support for maintenance or incident response.
• Limited travel between office locations may be required.

• BGP
• Dynamic routing protocols
• Advanced firewall administration
• Cisco ASA or NGFW experience
• SD‑WAN design/optimization
• QoS configuration
• Azure networking
• Hybrid cloud networking
• Zero Trust networking concepts
• SIEM/network logging integration
• IDS/IPS familiarity
• Government IT experience
• Multi‑site enterprise experience