Lead Network Engineer

Job Summary 
• Serve as the hands-on technical lead for HRSA’s enterprise network, leading a team of three 
network engineers and working directly with the HRSA client counterpart. 
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security 
infrastructure, including routers, switches, firewalls and remote access systems. 
• Act as the top escalation point for complex network, firewall, VPN and authentication problems, 
using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause. 
• Plan and execute Cisco switch and firewall software upgrades, technology refresh and 
enhancements during scheduled maintenance windows under change management. 
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, 
RADIUS and LDAP, and Cisco Identity Services Engine (ISE) for network access control. 
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure 
network security groups (NSGs). 
• Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with 
federal and HHS policy, including backup and recovery. 
• Own network-security standard operating procedures (SOPs), network diagrams and technical 
documentation; coach and develop less-experienced engineers. 
• Partner with project managers to deliver network projects on time and within scope; evaluate 
new technologies and coordinate hardware, software and vendor procurement. 
Required Qualifications 
• Bachelor’s degree or an equivalent combination of education and experience. 
• 10 years of network engineering experience in federal or enterprise-level IT environments. 
• 5 years leading a team of network engineers while remaining hands-on, and working directly 
with a client counterpart. 
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis 
with Wireshark. 
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama. 
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; 
IPv4 and IPv6. 
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE). 
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, 
LDAP). 
• Azure networking with network security groups (NSGs). 
• SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and 
troubleshooting. 
• Vulnerability remediation, TLS certificate renewal and installation, and change management 
processes. 
• Writing, maintaining and implementing network-security SOPs and technical documentation 
(required). 
• Willing to work onsite after hours and on weekends for maintenance windows and to take part 
in the on-call rotation (required). 
• Strong problem-solving, communication and organizational skills. 
• Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of 
the last 5 years. 
Preferred Qualifications 
• NetScaler / Citrix ADC experience. 
• Experience supporting HHS or other federal civilian agency networks. 
• Current or recent federal Public Trust investigation. 
• CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco ISE certifications.