Network Engineer

Network Engineer

Duration: 60 months Location: Washington, DC Hours Per Week: 40 Scope of Project: The Contractor shall provide Network Engineering Services that include designing, implementing, and maintaining secure network architectures that enforce Zero Trust principles, including network segmentation, micro-segmentation, and least privilege access controls. The Contractor will ensure that all network devices including switches, routers, and perimeter systems are configured, hardened, and continuously monitored in accordance with federal security standards and industry’s best practices. The Contractor shall provide engineering and operational support for the Congressional Budget Office’s Cisco network environment. The objective of this support is to strengthen the security, reliability, and resilience of the network infrastructure while addressing identified Incident Response (IR) remediation requirements.

Responsibilities:

• Enterprise Network Operations: Support the implementation, operation, and optimization of the Congressional Budget Office’s Cisco-based network infrastructure, including core, distribution, access, and edge environments, ensuring reliability, performance, and availability in support of mission requirements.
• Network Security & Compliance Support: Assist in implementing and maintaining network security controls aligned with NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and Cisco security best practices, including participation in monitoring, risk mitigation, and maintaining network security posture.
• Routing, Switching & Infrastructure Services: Configure, manage, and troubleshoot routing, switching, and network services (e.g., VLANs, DNS, DHCP, VPNs), ensuring secure configurations and alignment with organizational standards.
• Network Monitoring & Operations Support: Assist in monitoring network performance and availability, responding to alerts, and supporting integration with enterprise monitoring, logging, and security tools to enhance visibility and incident response.
• Vulnerability Management & Device Maintenance: Support network device patching, firmware updates, and vulnerability remediation activities, ensuring infrastructure components remain secure, compliant, and up to date.
• Change Management & Documentation: Participate in changing management processes, maintain accurate network diagrams and configuration documentation, and support the development and upkeep of standard operating procedures to ensure operational continuity and audit readiness.
• Customer Service & Team Collaboration: Serve as the technical adviser for complicated service desk tickets and modifications to better support network operations, while collaborating with cloud, Microsoft engineering, and cybersecurity teams.

Required/Preferred Skills:

• NIST SP 800-53 Compliance • NIST SP 800-207 Zero Trust Architecture • Cisco Routing & Switching • Cisco Network Security • Network Segmentation & Micro-Segmentation • 802.1X Network Access Control • VLANs • DNS • DHCP • VPN Technologies • SIEM Integration • Centralized Logging & Audit Controls • Vulnerability Management • Network Device Hardening • Cisco Secure Configuration Guides • Firewall Administration • MFA Implementation • Incident Response Support • Root Cause Analysis (RCA) • Change Management • Network Documentation • SOP Development & Maintenance • Network Monitoring Tools • Patch Management • Firmware Upgrades • Cisco Enterprise Infrastructure • Federal Security Standards • Risk Management Framework (RMF) • Cloud & Secure Network Environments