Network Engineer

Network EngineerLooking for a Network Engineer responsible for the design, governance, and continuous evolution of WMATA's enterprise network architecture across LAN, WAN, SD-WAN, wireless, firewall, load-balancing, and network security domains. The Network Architect shall:Serve as the technical authority for all network architecture decisions, including routing, segmentation, firewall architecture, load-balancing architecture, security integration, traffic engineering, and resiliency design.Develop, maintain, and continuously refine network architecture artifacts, including:High-level and low-level network designs (HLDs/LLDs)Network segmentation models supporting IT/OT convergenceRouting architectures (BGP, OSPF, SD-WAN) and failover designFirewall security zone models and policy framework architectureLoad-balancing and application delivery architecture designsDefine and enforce network standards and configuration baselines to ensure consistency, security, availability, performance, and operational supportability across all environments.Establish architecture standards for firewalls, VPNs, Client/load-balancing platforms, network segmentation, high-availability services, and cloud connectivity.Support lifecycle and capacity planning, including:Hardware/software EOL/EOS trackingThroughput forecasting and scalability planningNetwork modernization roadmap developmentFirewall and load-balancer lifecycle planningCoordinate network architecture alignment with NFE Solution implementation and enterprise infrastructure environments.Review and approve firewall segmentation strategies, security zone designs, routing architectures, application traffic flows, and load-balancing configurations to ensure alignment with enterprise architecture standards.Support CCB activities by reviewing and approving all network-related changes impacting architecture, security, availability, performance, or resiliency.Evaluate and incorporate OEM/vendor solutions and industry best practices for routing, switching, wireless infrastructure, firewalls, load balancing, network security, and cloud networking into the enterprise network environment.Provide architectural oversight for integration of monitoring, telemetry, observability, and network management platforms to ensure operational visibility and supportability of all network services.Skill - Required/Desired - Years of experienceUnderstanding network infrastructure and protocols (proprietary, IMS, and IP), latest LAN/WAN/ISP protocols (MPLS, BGP, SIP) - Required - 8 YearsUnderstanding the latest LAN/WAN/ISP protocols (MPLS, BGP, SIP), latest-generation routers, telecommunications switches - Required - 8 YearsStrong client skills with the demonstrated ability to communicate effectively throughout all levels of an organization. - Required - 8 YearsExceptional written skills, including authoring client communications, expository project documents (e.g., Statements of Work), and strategic analysis - Required - 8 YearsProficiency in formal project management methods, including internal documentation and external communications - Required - 8 YearsFirst-hand experience designing CISCO network applications. differences between commonly used applications and technologies - Required - 8 YearsFirst-hand experience designing, implementing, and managing e911 system deployments in large (500 + people) organizations - Required - 8 YearsFirst-hand experience in wireless technical development efforts and ability to speak to the merits of and differences between commonly used applications - Required - 8 YearsFirst-hand oversight experience on Voice over IP technical development efforts and ability to speak to merits of, and differences between technologies - Required - 8 YearsCCNP Enterprise or equivalent - RequiredCCIE (with or without lab), Palo Alto, Fortina (One of these) - Highly desired