Senior Network Engineer

Work location: Onsite (Ashburn, VA)

Clearance: Public Trust (successful completion of government background investigation) - Secret or Top Secret preferred

Position Title: Senior Network Engineer – Operational Technology & WAN Architecture

Position Summary

The Senior Network Engineer will lead the design, implementation, and sustainment of mission‑critical network architectures supporting operational technology (OT) systems and remote field environments. This role is responsible for developing and maintaining wide‑area network (WAN) solutions, including Virtual Routing and Forwarding (VRF) and Dynamic Multipoint Virtual Private Network (DMVPN) designs, hybrid cloud connectivity, and secure integration with enterprise applications. The engineer will work closely with architecture, operations, security, program management, and field support teams to ensure reliable, secure transport of sensor and application data and to support authorization and risk‑management objectives.

Key Responsibilities

• Architecture & Design
• Lead the design of VRF/DMVPN‑based WAN architectures for OT and remote site connectivity.
• Develop routing strategies across core, distribution, and access layers, including segmentation of OT traffic from other enterprise workloads.
• Design hybrid network solutions that integrate on‑premises infrastructure with cloud environments (e.g., virtual networks, VPNs, transit connectivity).
• Implementation & Cutover
• Plan and execute network deployments and migrations, including introducing new switches/routers into existing environments.
• Develop detailed implementation and cutover plans, including staging, validation, rollback procedures, and coordination with field support personnel.
• Lead end‑to‑end connectivity validation from field devices through network infrastructure to application endpoints.
• Operations & Troubleshooting
• Serve as a Tier‑3 escalation point for complex network issues involving OT devices, remote sites, and enterprise applications.
• Develop test plans and diagnostic procedures to isolate and resolve multi‑segment connectivity and performance issues.
• Provide guidance to operations and field support staff on network monitoring, incident handling, and configuration standards.
• Security & Compliance
• Incorporate security requirements (segmentation, firewall rules, routing policies, logging) into network designs and changes.
• Support security and authorization activities, including documentation and technical input for risk acceptance and authorization packages.
• Coordinate with security teams on vulnerability scanning, log ingestion, and continuous monitoring, ensuring networks are prepared for these activities.
• Cloud Networking
• Design and maintain connectivity between on‑premises networks and cloud network constructs (e.g., virtual networks, route tables, gateways).
• Implement routing and segmentation strategies in cloud environments that align with on‑premises policies and security models.
• Work with application and security teams to ensure cloud‑connected solutions meet availability, performance, and security requirements.
• Governance & Change Management
• Prepare and review network and firewall change requests, ensuring technical clarity and alignment with governance processes.
• Document network designs, implementation procedures, and operational runbooks for use by engineering, operations, and field teams.
• Participate in cross‑functional planning with program management, architecture, security, and field support organizations.

Qualifications

• Extensive experience (typically 7 years) in designing and implementing enterprise network solutions, including WAN, routing, and segmentation.
• Strong hands‑on expertise with routing protocols (e.g., OSPF, BGP) and VPN technologies (e.g., DMVPN or equivalent designs).
• Demonstrated experience segmenting traffic using VRF or similar constructs in multi‑tenant or multi‑mission environments.
• Experience supporting remote or constrained environments and OT‑related networking (e.g., sensors, specialized equipment, field systems).
• Practical experience integrating on‑premises networks with cloud platforms, including design of secure connectivity and routing.
• Familiarity with network security principles and their application in architecture and change management.
• Ability to produce clear design documents, implementation plans, and operational procedures and to explain complex concepts to non‑network stakeholders.

Preferred Qualifications

• Experience working in regulated or high‑assurance environments where authorization, risk acceptance, and formal security assessments are required.
• Exposure to security monitoring and vulnerability management tools and processes, including coordination with security operations and assessment teams.
• Experience coordinating technical work across multiple internal groups and external vendors in support of mission systems.

Core Competencies

• Strong analytical and problem‑solving skills applied to complex, multi‑component network environments.
• Ability to lead technical efforts while maintaining alignment with program schedules, risk constraints, and change management processes.
• Effective communication skills, both written and verbal, for documenting designs and coordinating with technical and non‑technical stakeholders.

Certifications preferred:

• Cisco Certified Network Professional (CCNP) or Cisco Certified Architect Professional (CCNA)
• Professional Cloud Solutions Architect Certification or Certification in Multi-Cloud (AWS, GCP, OCI, Azure)