Network Engineer

Network EngineerIs US Citizenship a requirement? YESWhat type/level of security clearance required? SecretLocation: Client Site / Vienna, VA 22182Required Skills:4–7 years of experience in network and/or security engineeringHands-on Cisco experience — Catalyst/Nexus switches, routers, and IOS-XE — sufficient to maintain both on-prem and cloud routersExperience with enterprise firewalls, specifically Palo Alto and/or Cisco Firepower (called out as a must-have) • Solid hands-on experience with a cloud environment — AWS or Azure — including cloud networking constructs (VNets, NSGs, route tables, Direct Connect)Experience with Azure Government or AWS GovernmentAt least a working understanding of Zero Trust Architecture principlesUnderstanding of federal security frameworks: NIST 800-53, FISMA, and FedRAMPExperience performing software/firmware updates and troubleshooting complex issuesComfort interfacing directly with users/customersAble to be on-site Monday–Friday, and available for after-hours and weekend support as neededPreferred Skills:Zscaler experience — ZIA and ZPA configuration, policy management, and integration with Zero Trust frameworks (nice-to-have, explicitly not required)One or more relevant certifications: CCNA/CCNP, CompTIA Security+/CySA+, AZ-700, AZ-500, Zscaler Certified Cloud Professional (ZCCP), or Palo Alto Networks Certified Network Security Engineer (PCNSE)Day-to-day Responsibilities:Design, configure, and maintain enterprise network and security infrastructure (on-prem and cloud)Support cloud migration and hybrid connectivity effortsImplement and enforce security policies aligned with federal compliance requirementsTroubleshoot network incidents and participate in change management processesPerform software/firmware updates and resolve complex technical issuesInterface with users and customers on requests and issuesContribute to architecture documentation and ATO/assessment activitiesProvide after-hours and weekend support as needed