Senior Network Engineer - TS/SCI
$103,500–$181,100 year
On-siteCentreville, Virginia, United States
Job Summary
Design, configure, deploy, and maintain LAN/WAN infrastructure including Cisco routers, switches, firewalls, and load balancers across classified on-premises and hybrid cloud environments. Engineer and sustain connectivity between on-premises networks and Microsoft Azure, implementing routing protocols, BGP, and security groups while hardening devices to DoD STIGs. Perform network performance monitoring, capacity planning, troubleshooting, and root-cause analysis using enterprise tools, and maintain comprehensive documentation including topology diagrams and IPAM records. Support physical infrastructure buildouts and participate in change management, design reviews, and security assessments for RMF authorization activities. This hands-on engineering role on a mission-critical program directly contributes to matters of national security within Parsons' Federal Solutions team.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline
- 8+ years of progressive network engineering experience designing and operating enterprise LAN/WAN environments
- Expert-level knowledge of TCP/IP, routing and switching (BGP, OSPF, VLANs, trunking), and network security principles
- Experience with cloud networking and hybrid cloud (cloud plus physical on-premises network equipment)
- Cisco IOS-XE experience and scripting on routers
- Hands-on experience configuring and hardening Cisco enterprise network equipment in accordance with DoD STIGs
- Experience supporting networks in classified, air gapped, or other secure DoD/IC environments
- Cisco CCNA/CCNP (Enterprise or Security) or equivalent professional-level network certification
- Strong documentation skills, including the ability to create detailed engineering specifications and network diagrams
- Active TS/SCI security clearance
Desired Qualifications
- Experience engineering hybrid cloud connectivity to Microsoft Azure or Azure Government (ExpressRoute, VPN gateways, hub-and-spoke VNet design)
- Experience with next-generation firewalls (Palo Alto, Cisco Firepower) and network access control solutions
- Familiarity with ICD 705 / SCIF infrastructure requirements and secure facility network buildouts
- Experience with network automation and infrastructure-as-code (Python, Ansible, Terraform)
- Knowledge of Type 1 encryption devices (e.g., TACLANE) and classified transport solutions
- CCIE, Azure Network Engineer Associate (AZ-700), or CISSP certification
- Experience supporting RMF authorization activities and DCSA or other government security assessments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.