Network Engineer

Network Engineer

Washington, D.C. Metro

At Ardent, we hire people who want more than a job — they want to serve a mission that matters. Our teams support the federal government's most critical national security and defense priorities, helping protect the nation, strengthen resilience, and advance the technologies and capabilities that keep America secure. For veterans, cleared professionals, and purpose-driven innovators, Ardent is a place to continue serving alongside a team that understands the importance of the mission and the people behind it.

We also know top talent has choices, which is why we back our mission with benefits and flexibility that stand out: competitive pay, comprehensive health coverage, flexible PTO, federal holidays off, tuition reimbursement, professional development support, wellness stipends, and a culture that values and rewards hard work, dedication, and adaptability. If you want to build something meaningful, while enjoying the kind of flexibility and support that you need to do your best work — Ardent is where your next mission begins.

Ardent is seeking a Network Engineer to join our team.

This is an onsite position in Washington DC.

Position Description:

• Enterprise Network Operations: Support the implementation, operation, and optimization of the Congressional Budget Office's Cisco-based network infrastructure, including core, distribution, access, and edge environments, ensuring reliability, performance, and availability in support of mission requirements.
• Network Security & Compliance Support: Assist in implementing and maintaining network security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco security best practices, including participation in monitoring, risk mitigation, and maintaining network security posture.
• Routing, Switching & Infrastructure Services: Configure, manage, and troubleshoot routing, switching, and network services (e.g., VLANs, DNS, DHCP, VPNs), ensuring secure configurations and alignment with organizational standards.
• Network Monitoring & Operations Support: Assist in monitoring network performance and availability, responding to alerts, and supporting integration with enterprise monitoring, logging, and security tools to enhance visibility and incident response.
• Vulnerability Management & Device Maintenance: Support network device patching, firmware updates, and vulnerability remediation activities, ensuring infrastructure components remain secure, compliant, and up to date.
• Change Management & Documentation: Participate in changing management processes, maintain accurate network diagrams and configuration documentation, and support the development and upkeep of standard operating procedures to ensure operational continuity and audit readiness.
• Customer Service & Team Collaboration: Serve as the technical adviser for complicated service desk tickets and modifications to better support network operations, while collaborating with cloud, Microsoft engineering, and cybersecurity teams.

Responsibilities and Duties:

• Implement and maintain network security controls aligned with NIST SP 800-53, including access control (AC), configuration management (CM), system and communications protection (SC), and audit and accountability (AU) control families.
• Enforce Zero Trust network architecture principles in accordance with NIST SP 800-207, including network segmentation, micro-segmentation, and continuous verification of users and devices.
• Design and implement least-privilege network access controls, ensuring role-based and identity-aware access across all network layers.
• Manage 802.1X port-based network access control to prevent unauthorized device connectivity and enforce authentication at the network edge.
• Configure and maintain centralized logging and audit capabilities for all network devices, ensuring logs are forwarded to enterprise SIEM platforms and retained in accordance with compliance requirements.
• Conduct continuous monitoring and vulnerability assessments of network infrastructure, identifying risks and coordinating remediation in alignment with NIST Risk Management Framework (RMF) practices.
• Harden all network devices using secure configuration baselines (e.g., Cisco Secure Configuration Guides), including disabling unnecessary services, enforcing strong encryption protocols, and securing management interfaces.
• Secure public-facing and perimeter network assets by implementing strict ingress/egress filtering, firewall rule optimization, and multi-factor authentication for administrative access.
• Support incident response activities by providing network-level analysis, containment actions (e.g., segmentation, blocking malicious traffic), and forensic data collection.
• Establish and maintain secure network segmentation strategies to limit lateral movement and protect high-value assets and sensitive environments.
• Ensure all network changes follow formal change control processes with security impact analysis, supporting compliance with NIST configuration management requirements.
• Develop, implement, and maintain Network Standard Operating Procedures (SOPs); review and update all SOPs on at least an annual basis or as required to reflect changes in technology, policy, or security requirements.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field (or equivalent experience).
• Minimum of 5 years of experience supporting enterprise network environments.
• Hands-on experience with Cisco networking technologies, including routers, switches, and firewalls.
• Strong knowledge of routing and switching protocols and enterprise network design principles.
• Experience implementing network security controls and best practices.
• Familiarity with Zero Trust Architecture concepts and implementation strategies.
• Experience with network monitoring, troubleshooting, and incident response.
• Knowledge of federal cybersecurity frameworks, including:
• NIST SP 800-53
• NIST SP 800-207 (Zero Trust Architecture)
• NIST Risk Management Framework (RMF)
• Experience with SIEM integration, centralized logging, and security monitoring tools.
• Strong analytical, troubleshooting, and documentation skills.

Due to the nature of the work we support, all candidates in consideration for this role must be willing to undergo the government issued background investigation process.

Ardent is an equal opportunity employer. We will not discriminate in employment, recruitment, advertisements for employment, compensation, termination, upgrading, promotions, and other conditions of employment against any employee or job applicant on the bases of race, color, gender, national origin, age, religion, creed, disability, veteran's status, sexual orientation, gender identity, gender expression, or any other basis protected by state, local, or federal law.