Senior Network Engineer

Senior Network EngineerWorld Wide Technology (WWT) is seeking a Senior Network Engineer with at least 8 years of enterprise networking and cybersecurity infrastructure experience to support mission-critical Department of Defense (DoD) environments. In this role, you will serve as the primary network architect and security systems integrator, engineering resilient, high-speed, and highly secure network fabrics designed to transport, inspect, and analyze sensitive operational telemetry.You will design and administer multi-site routed and switched backbones, implement Zero Trust network segmentation, configure Next-Generation Firewalls (NGFWs), and architect high-capacity network visibility architectures—integrating hardware taps, packet brokers, and network sensors (such as Zeek and Suricata) directly into enterprise security operations platforms.Key Responsibilities:Enterprise Network Architecture & Operations: Design, deploy, configure, and maintain mission-critical enterprise routing, switching, and transport backbones (BGP, OSPF, EVPN-VXLAN, MPLS) across multi-site DoD and secure enclave environments.Network Security & Boundary Defense: Architect, deploy, and manage Next-Generation Firewalls (NGFW - Palo Alto Networks, Fortinet, or Cisco Firepower), implementing strict zero-trust boundary controls, micro-segmentation, deep packet inspection, and IPS/IDS policies.Sensor Infrastructure & Telemetry Ingestion: Architect and sustain passive/active network visibility infrastructure, including physical/virtual TAPs, network packet brokers (e.g., Gigamon, Ixia), and high-throughput network forensics engines (Zeek, Suricata) to ensure complete packet capture and telemetry ingestion.DoD Compliance & Network Hardening: Harden all network routing, switching, and security appliances in strict adherence to DISA Security Technical Implementation Guides (STIGs), DoD boundary protection requirements, and NIST SP 800-53/Zero Trust Architecture (SP 800-207) controls.Cyber Operations & SIEM Pipeline Alignment: Collaborate closely with SOC analysts and cyber platform teams to route, filter, and stream NetFlow, IPFIX, Syslog, and Zeek/Suricata logs into analytic data pipelines (Elastic Stack/ELK, Splunk, Kafka) for real-time threat detection.Encrypted Transport & Secure Interconnects: Engineer, maintain, and audit secure site-to-site IPsec VPNs, MACsec links, and HAIPE/Type-1 cryptographic overlay tunnels ensuring data-in-transit confidentiality and regulatory compliance across enclaves.Network Automation & Programmability: Develop automation playbooks and custom scripts using Python, Ansible, and REST APIs to streamline switch/router configurations, firmware lifecycle updates, ACL compliance audits, and telemetry routing.Performance Tuning & High Availability: Analyze network telemetry, packet latency, jitter, and link utilization; optimize Quality of Service (QoS), jumbo frame support, and redundant fabric architectures (MLAG, vPC, BFD) to prevent packet loss under high sensor traffic loads.Incident Response & Network Forensics Collaboration: Support cyber incident response and threat hunting investigations by performing advanced packet captures (PCAP analysis), tracing unauthorized lateral movement, and isolating compromised network segments.Technical Documentation & ATO Artifacts: Produce authoritative network topologies, IP addressing schemas, data-flow diagrams, and technical risk documentation required for DoD Risk Management Framework (RMF) and Authority to Operate (ATO) packages.