Network Engineer

Network EngineerLocation: Washington, D.C. Type: Contract Model: Hybrid – Onsite and Remote Security Clearance: Active - DODResponsibilities:Implement DISA Secure Cloud Computing Architecture (SCCA) reference design experienceApply AWS networking depth including TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT designManage Palo Alto VM-Series NGFW deployment and configurationUtilize Prisma Access / SASE solutions and maintain NIPRNet ingress / BCAP familiarityEnsure compliance with DISA STIGs for network devicesDesign and oversee VDSS/VDMS boundary, RFC 1918, Direct Connect / DC Gateway, transit gateway architectureImplement boundary public-IP exposure controls and conduct network scansRequirements:Active security clearance – DOD (recommended)Strong experience with DISA SCCA reference design implementationDeep knowledge of AWS networking services (TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT)Familiarity with Palo Alto VM-Series NGFW and Prisma Access / SASEExperience with NIPRNet ingress and BCAP protocolsKnowledge of DISA STIGs for network devicesCertifications: AWS Advanced Networking Specialty (preferred), Palo Alto PCNSE, DoD 8570/8140 IAT IIExperience with federal networks and SCCA implementation (strongly preferred)