Lead Network engineer

Lead Network engineer

Client: Rockville MD

Onsite

Visa: Only GC/USC

Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.

Job Summary

Serve as the hands-on technical lead for HRSAs enterprise network leading a team of three network engineers and working directly with the HRSA client counterpart.

Design plan implement and maintain enterprise LAN/WAN Zscaler and network security infrastructure including routers switches firewalls and remote access systems.

Act as the top escalation point for complex network firewall VPN and authentication problems using Wireshark packet captures SolarWinds Riverbed Grafana and Cribl to find root cause.

Plan and execute Cisco switch and firewall software upgrades technology refresh and enhancements during scheduled maintenance windows under change management.

Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN RADIUS and LDAP and Cisco Identity Services Engine (ISE) for network access control.

Design implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).

Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy including backup and recovery.

Own network-security standard operating procedures (SOPs) network diagrams and technical documentation; coach and develop less-experienced engineers.

Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware software and vendor procurement.

Required Qualifications

Bachelors degree or an equivalent combination of education and experience.

10 years of network engineering experience in federal or enterprise-level IT environments.

5 years leading a team of network engineers while remaining hands-on and working directly with a client counterpart.

Expert troubleshooting of complex network issues including packet-capture (PCAP) analysis with Wireshark.

Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.

Expert Cisco switching including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.

Zscaler Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).

RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS LDAP).

Azure networking with network security groups (NSGs).

SolarWinds including automation scripts; Riverbed Grafana or Cribl for monitoring and troubleshooting.

Vulnerability remediation TLS certificate renewal and installation and change management processes.

Writing maintaining and implementing network-security SOPs and technical documentation (required).

Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).

Strong problem-solving communication and organizational skills.

Preferred Qualifications

NetScaler / Citrix ADC experience.

Experience supporting HHS or other federal civilian agency networks.

Current or recent federal Public Trust investigation.

CCNP / CCIE Palo Alto PCNSE Zscaler or Cisco ISE certifications.

Required Skills:

HRSAs