Senior Network Engineer

Job Description

Job Title: Senior Network Engineer

\n

Location: Rockville, MD (Onsite Monday–Friday)

\n

\n

Job Summary

\n

\n
• Serve as a hands-on senior engineer on HRSA’s enterprise network team, working with the technical lead, project managers and HRSA stakeholders.
\n
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
\n
• Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations.
\n
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE).
\n
• Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl.
\n
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
\n
• Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management.
\n
• Maintain network-security SOPs, network diagrams and technical documentation, support backup, recovery and federal and HHS policy compliance.
\n
• Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement.
\n

\n

\n

Required Qualifications

\n

\n
• Bachelor’s degree or an equivalent combination of education and experience.
\n
• 8+ years of network engineering experience in federal or enterprise-level IT environments.
\n
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
\n
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
\n
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
\n
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
\n
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
\n
• Azure networking with network security groups (NSGs).
\n
• SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
\n
• Vulnerability remediation, TLS certificate renewal and installation, and change management processes.
\n
• Writing, maintaining and implementing network-security SOPs and technical documentation (required).
\n
• Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
\n
• Strong problem-solving, communication and organizational skills.
\n
• Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.
\n

\n

\n

Preferred Qualifications

\n

\n
• Experience supporting HHS or other federal civilian agency networks.
\n
• Current or recent federal Public Trust investigation.
\n
• CCNP, Palo Alto PCNSE, Zscaler or Cisco ISE certifications.
\n
• NetScaler / Citrix ADC exposure.
\n

\n