Lead Network Engineer with Security Clearance

Job Summary

• Serve as the hands-on technical lead for HRSA's enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
• Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause.
• Plan and execute Cisco switch and firewall software upgrades, technology refresh and enhancements during scheduled maintenance windows under change management.
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (Client) for network access control.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
• Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy, including backup and recovery.
• Own network-security standard operating procedures (SOPs), network diagrams and technical documentation; coach and develop less-experienced engineers.
• Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware, software and vendor procurement. Required Qualifications
• Bachelor's degree or an equivalent combination of education and experience.
• 10+ years of network engineering experience in federal or enterprise-level IT environments.
• 5+ years leading a team of network engineers while remaining hands-on, and working directly with a client counterpart.
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (Client).
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
• Azure networking with network security groups (NSGs).
• SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
• Vulnerability remediation, TLS certificate renewal and installation, and change management processes.
• Writing, maintaining and implementing network-security SOPs and technical documentation (required).
• Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
• Strong problem-solving, communication and organizational skills.
• Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.

Preferred Qualifications

• NetScaler / Citrix Client experience.
• Experience supporting HHS or other federal civilian agency networks.
• Current or recent federal Public Trust investigation.
• CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco Client certifications. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.