Job Opportunity: Senior Network Engineer

Senior Network Engineer

The Contractor shall provide Network Engineering Services that include designing, implementing, and maintaining secure network architectures that enforce Zero Trust principles, including network segmentation, micro-segmentation, and least privilege access controls. The Contractor will ensure that all network devices including switches, routers, and perimeter systems are configured, hardened, and continuously monitored in accordance with federal security standards and industry's best practices. The Contractor shall provide advanced engineering, operational, and advisory support for the Congressional Budget Office's Cisco network environment. The objective of this support is to strengthen the security, reliability, and resilience of the network infrastructure while addressing identified Incident Response (IR) remediation requirements.

The Contractor shall provide comprehensive engineering, operational, and advisory support to enhance, secure, and sustain CBO's enterprise network infrastructure. This effort is focused on remediating identified Incident Response (IR) findings, strengthening network security posture, and ensuring alignment with federal cybersecurity standards, including NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco best practices.

• Enterprise Network Engineering: Design, implement, operate, and optimize the Congressional Budget Office's Cisco-based network infrastructure, including core, distribution, access, and edge environments, to ensure high availability, scalability, performance, and resilience in support of mission requirements.
• Network Security Architecture & Compliance: Implement and maintain network security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco security best practices, including continuous monitoring, risk mitigation, and network security posture management.
• Network Access Control & Identity Integration: Engineer and enforce secure network access controls, including 802.1X port-based authentication, role-based access, and integration with enterprise identity services to support Zero Trust principles and least-privilege access models.
• Routing, Switching & Infrastructure Services: Manage and support routing, switching, and network services (e.g., VLANs, DNS, DHCP, VPNs), ensuring secure configuration, optimal performance, and alignment with organizational standards and policies.
• Perimeter & Public-Facing Security: Secure and managing public-facing network infrastructure, including firewalls, remote access solutions, and edge devices, ensuring hardened configurations, restricted access, and continuous monitoring to prevent unauthorized access and external threats.
• Network Monitoring & Security Operations Enablement: Implement and manage network monitoring, logging, and alerting capabilities, integrating with enterprise SIEM and network detection and response (NDR) tools to enhance visibility, threat detection, and incident response readiness.
• Vulnerability Management & Device Lifecycle: Establish and maintain a structured program for network device patching, firmware updates, vulnerability remediation, and lifecycle management to ensure all infrastructure components remain secure, compliant, and supported.
• Change Management & Documentation: Support formal change management processes, maintain accurate network diagrams and configuration documentation, and contribute to standard operating procedures to ensure transparency, traceability, and operational continuity.
• Advisory & Technical Leadership: Serve as a senior technical advisor to CBO stakeholders, collaborating with cybersecurity, cloud, and operations teams to resolve complex network issues, improve architecture, and support audits, assessments, and compliance initiatives.
• Customer Service & Team Collaboration: Serve as the technical adviser for complicated service desk tickets and modifications to better support network operations, while collaborating with cloud, Microsoft engineering, and cybersecurity teams.

The following role is anticipated to be required for this work and is considered Key Personnel, in accordance with SOW paragraph 2.9.