Network Engineer

Network EngineerPosition Title: Network EngineerLocation: Annapolis Junction, MDReports To: Program ManagerJob Type: Full-timeClearance Requirement: Active TS/SCI with PolygraphSummary: As a Network Engineer for a recently awarded government contract, you are a crucial architect of the secure transport and infrastructure environments supporting mission-critical operations. We are seeking a dedicated technical problem-solver with expertise in high-assurance network architecture, software-defined networking, and systems integration. In this role, you will design, deploy, maintain, and optimize secure network paths across multi-site datacenters, enclaves, and tail sites, ensuring strict availability, resilience, and security boundary enforcement.This role will support and represent LufCo with our industry partners. At LufCo, you'll do more than fill a role, you'll help build what's next. We offer a people-first, agile environment where your ideas are valued, your impact is visible, and your work directly supports meaningful, mission-driven outcomes.Key Responsibilities:Design, deploy, configure, and maintain high-assurance network infrastructure, routers, switches, and endpoints supporting multi-datacenter VDI environments, secure enclaves, and tail-site connectivity.Provide technical leadership and escalation support for Network and System Administrators to optimize system performance, automate network management, and eliminate infrastructure bottlenecks.Engineer, configure, and troubleshoot network interfaces, one-way diodes, and boundary protection devices to guarantee secure data transmission across cross-domain and cryptographic boundaries.Interface network systems with high-assurance cryptographic equipment, key management devices, and hardware security modules (HSMs) to enforce data protection and key distribution integrity.Implement and sustain customer compliance agents and security controls across network devices to maintain continuous Authority to Operate (ATO).Support Network enterprise mandates, conduct adjacent and complementary network engineering operations, and execute automated configuration management and drift remediation using Infrastructure as Code (IaC) tools.Qualifications:Education:Bachelor's degree in Network Engineering, Computer Science, or a related technical discipline from an accredited college or university.4 years of professional experience may be substituted for a degreeExperience:NE1: 5+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexityNE2: 10+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexityNE3: 15+ years of demonstrated experience in networking engineering, network defense operations and infrastructure sustainment on programs or contracts of similar scope and complexityTechnical Skills:Networking & Protocols: In-depth expertise in software-defined networking (SDN), WAN/LAN routing, switching, and VPN implementation. Proven capability in designing boundary defenses, including cross-domain solutions and unidirectional diodes, while performing advanced network performance modeling to ensure high availability across geographically dispersed datacenters.Cryptographic & Enclave Security: Advanced proficiency in implementing cryptographic standards (e.g., FIPS 140-2/3), managing secure key lifecycle operations (rotation, revocation, and storage), and designing cryptographic boundary defenses for classified or air-gapped environments. Hands-on experience integrating network platforms with Public Key Infrastructure (PKI), Key Management Infrastructure (KMI) concepts, high-assurance encryption devices, and Zero Trust Architecture (ZTA) to secure mission-critical workloads.Infrastructure as Code & Security Tools: Proficiency in automating infrastructure via Ansible playbooks and GitLab CI/CD pipelines. Experience in systems hardening to DISA STIGs and CIS Benchmarks, utilizing vulnerability scanning tools (Nessus), file integrity monitoring (Tripwire), and implementing network logging and observability using the ELK stack (Elasticsearch, Logstash, Kibana) and Grafana to maintain continuous compliance and RMF alignment.Why Join Us?The LufCo Difference: Join a company that prioritizes employee experience. We are more than just a contractor; we are a community of innovators who value flexibility and authentic connection.Impactful Work: Contribute to critical national security initiatives. Your analysis directly protects the nation and supports those on the front lines.Cutting-Edge Stack: Work with the latest advancements in AI/ML, cloud-scale analytics, and modern data visualization tools.Growth-Centric Culture: We invest in you. Enjoy opportunities for professional development, advanced training, and a clear path for career advancement.Comprehensive Benefits: We offer competitive salaries, a generous PTO policy, 401K matching, and premium health/dental/vision coverage.Compensation and Benefits:Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.For the full list of LufCo Benefits, visit our website: availability can vary due to dynamic, evolving contract needs. This job posting being active does not guarantee an immediately available position matching its description. This job description is intended to provide a general overview of the responsibilities and qualifications for this position. It is not an exhaustive list and may be subject to change based on the needs of the company.LufCo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.LufCo Employees: This position qualifies for up to a Purple Award level referral bonus. For more information, visit the Employee Portal.