Network Engineer

Network Engineer

Looking for a Network Engineer responsible for the design, governance, and continuous evolution of WMATA's enterprise network architecture across LAN, WAN, SD-WAN, wireless, firewall, load-balancing, and network security domains. The Network Architect shall:

• Serve as the technical authority for all network architecture decisions, including routing, segmentation, firewall architecture, load-balancing architecture, security integration, traffic engineering, and resiliency design.
• Develop, maintain, and continuously refine network architecture artifacts, including:
• High-level and low-level network designs (HLDs/LLDs)
• Network segmentation models supporting IT/OT convergence
• Routing architectures (BGP, OSPF, SD-WAN) and failover design
• Firewall security zone models and policy framework architecture
• Load-balancing and application delivery architecture designs
• Define and enforce network standards and configuration baselines to ensure consistency, security, availability, performance, and operational supportability across all environments.
• Establish architecture standards for firewalls, VPNs, Client/load-balancing platforms, network segmentation, high-availability services, and cloud connectivity.
• Support lifecycle and capacity planning, including:
• Hardware/software EOL/EOS tracking
• Throughput forecasting and scalability planning
• Network modernization roadmap development
• Firewall and load-balancer lifecycle planning
• Coordinate network architecture alignment with NFE Solution implementation and enterprise infrastructure environments.
• Review and approve firewall segmentation strategies, security zone designs, routing architectures, application traffic flows, and load-balancing configurations to ensure alignment with enterprise architecture standards.
• Support CCB activities by reviewing and approving all network-related changes impacting architecture, security, availability, performance, or resiliency.
• Evaluate and incorporate OEM/vendor solutions and industry best practices for routing, switching, wireless infrastructure, firewalls, load balancing, network security, and cloud networking into the enterprise network environment.
• Provide architectural oversight for integration of monitoring, telemetry, observability, and network management platforms to ensure operational visibility and supportability of all network services.

Skill - Required/Desired - Years of experience

Understanding network infrastructure and protocols (proprietary, IMS, and IP), latest LAN/WAN/ISP protocols (MPLS, BGP, SIP) - Required - 8 Years

Understanding the latest LAN/WAN/ISP protocols (MPLS, BGP, SIP), latest-generation routers, telecommunications switches - Required - 8 Years

Strong client skills with the demonstrated ability to communicate effectively throughout all levels of an organization. - Required - 8 Years

Exceptional written skills, including authoring client communications, expository project documents (e.g., Statements of Work), and strategic analysis - Required - 8 Years

Proficiency in formal project management methods, including internal documentation and external communications - Required - 8 Years

First-hand experience designing CISCO network applications. differences between commonly used applications and technologies - Required - 8 Years

First-hand experience designing, implementing, and managing e911 system deployments in large (500 + people) organizations - Required - 8 Years

First-hand experience in wireless technical development efforts and ability to speak to the merits of and differences between commonly used applications - Required - 8 Years

First-hand oversight experience on Voice over IP technical development efforts and ability to speak to merits of, and differences between technologies - Required - 8 Years

CCNP Enterprise or equivalent - Required

CCIE (with or without lab), Palo Alto, Fortina (One of these) - Highly desired