Senior Network Engineer

Senior Network Engineer

The Senior Network Engineer will support Health Resources & Services Administration (HRSA) projects by providing hands‑on expertise in the design, implementation and management of enterprise network infrastructure. This role works closely with Project Managers and cross‑functional teams to deliver complex initiatives ensuring high availability, security and performance of network systems.

• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler, and network security infrastructure.
• Configure and manage routers, switches, firewalls, and remote access systems.
• Implement and support RSA SecurID / RSA Authentication Manager solutions, including integration with VPNs, RADIUS and enterprise authentication systems.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures.
• Provide innovative engineering design solutions.
• Collaborate with Project Managers, engineers and stakeholders to deliver complex network projects on time and within scope.
• Analyze customer and business requirements to develop technical solutions for complex networking challenges.
• Ensure network integrity, security and compliance with federal and organizational policies, including backup and recovery capabilities.
• Monitor network performance using industry‑leading tools and proactively identify and resolve issues.
• Plan and execute network upgrades, enhancements and technology refresh initiatives.
• Evaluate and recommend emerging technologies to improve network performance, security and scalability.
• Coordinate procurement of network hardware, software, and vendor/subcontractor services as needed.
• Develop and maintain network documentation, diagrams and standard operating procedures.

• Bachelor's degree or equivalent combination of education and experience.
• 8+ years’ experience in network engineering, as described below.
• Experience supporting federal or enterprise‑level IT environments.
• Strong problem‑solving, communication and organizational skills.

• Strong experience in network engineering and architecture (LAN/WAN, routing/switching, firewalls, Zscaler).
• Hands‑on experience with RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
• Expertise with Cisco switches network software upgrades.
• Expertise troubleshooting complex network issues.
• Vulnerability remediation process knowledge.
• Update technical documentation, maintain and implement SOP for network security.
• Cisco IPsec VPN troubleshooting.
• Cisco Identity Services Engine (ISE).
• Solar Winds automation scripts.
• Cisco ASA Firewall 5500 / Firepower.
• Palo Alto Firewalls Panorama.
• Azure experience with NSGs (Networking).
• Analyzing PCAP files using Wireshark.
• Change management process knowledge.
• TLS certificate renewals and installations.
• Troubleshooting using Riverbed, Grafana, Cribl, and other available tools.
• Willingness to work after hours and weekends during maintenance windows (onsite) as needed (approximately every 9 weeks).

• Type:
  Regular
• Public Trust (Other Required): NACI (T1)
• Job Family: IT Infrastructure and Operations
• Location:
  
  Rockville, MD (onsite)
• Scheduled Weekly
  
  Hours:
  
  40
• Travel Required:
  
  None
• Telecommuting Options:
  Onsite
• US Citizenship
  
  Required:
  
  No
• Certifications:
  
  None
• Clearance Level: Must possess None; must be able to obtain None.
• Eligible for:
  Public Trust background investigation.

• 401(k) with company match.
• Comprehensive health and wellness packages.
• Internal mobility team dedicated to career development.
• Professional growth opportunities including paid education and certifications.
• Tough‑on‑cutting‑edge technology learning opportunities.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans