Network Engineer

Contract | Tri-Force Consulting Services, Inc. | United States

Posted On 06/22/2026

• IT Services
• Work Experience 5+ years
• NA
• City Washington
• State/Province District of Columbia
• 20515

Job Title: Network Engineer

Location: Washington, DC 20515

Client: Congressional Budget Office

Duration: 12 Months

The scope of work includes, but is not limited to, the following activities:

• Enterprise Network Operations:
  Support the implementation, operation, and optimization of the Congressional Budget Office’s Cisco-based network infrastructure, including core, distribution, access, and edge environments, ensuring reliability, performance, and availability in support of mission requirements.
• Network Security & Compliance Support:
  Assist in implementing and maintaining network security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco security best practices, including participation in monitoring, risk mitigation, and maintaining network security posture.
• Routing, Switching & Infrastructure Services:
  Configure, manage, and troubleshoot routing, switching, and network services (e.g., VLANs, DNS, DHCP, VPNs), ensuring secure configurations and alignment with organizational standards.
• Network Monitoring & Operations Support:
  Assist in monitoring network performance and availability, responding to alerts, and supporting integration with enterprise monitoring, logging, and security tools to enhance visibility and incident response.
• Vulnerability Management & Device Maintenance:
  Support network device patching, firmware updates, and vulnerability remediation activities, ensuring infrastructure components remain secure, compliant, and up to date.
• Change Management & Documentation:
  Participate in change management processes, maintain accurate network diagrams and configuration documentation, and support the development and upkeep of standard operating procedures to ensure operational continuity and audit readiness.
• Customer Service & Team
  
  Collaboration:
  
  Serve as the technical adviser for complicated service desk tickets and modifications to support network operations better, while collaborating with cloud, Microsoft engineering, and cybersecurity teams.

• Implement and maintain network security controls aligned with NIST SP 800-53, including access control (AC), configuration management (CM), system and communications protection (SC), and audit and accountability (AU) control families.
• Enforce Zero Trust network architecture principles in accordance with NIST SP 800-207, including network segmentation, micro-segmentation, and continuous verification of users and devices.
• Design and implement least‑privilege network access controls, ensuring role‑based and identity‑aware access across all network layers.
• Manage 802.1X port‑based network access control to prevent unauthorized device connectivity and enforce authentication at the network edge.
• Configure and maintain centralised logging and audit capabilities for all network devices, ensuring logs are forwarded to enterprise SIEM platforms and retained in accordance with compliance requirements.
• Conduct continuous monitoring and vulnerability assessments of network infrastructure, identifying risks and coordinating remediation in alignment with NIST Risk Management Framework (RMF) practices.
• Harden all network devices using secure configuration baselines (e.g., Cisco Secure Configuration Guides), including disabling unnecessary services, enforcing strong encryption protocols, and securing management interfaces.
• Secure public‑facing and perimeter network assets by implementing strict ingress/egress filtering, firewall rule optimization, and multi‑factor authentication for administrative access.
• Support incident response activities by providing network‑level analysis, containment actions (e.g., segmentation, blocking malicious traffic), and forensic data collection.
• Establish and maintain secure network segmentation strategies to limit lateral movement and protect high‑value assets and sensitive environments.
• Ensure all network changes follow formal change control processes with security impact analysis,…