Senior Network Engineer

Job Title: Senior Network Engineer
Location: Remote, but they need to go to office ( Rockville, MD) if there is any network issue arises (HRSA headquarters)
6+ Months

Must have lived in the U.S. at least 3 of the last 5 years. Investigation must be fully adjudicated before start (currently about 2 3 weeks)
Certification: None required; CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco ISE certifications preferred
Required Qualifications
Bachelor's degree or an equivalent combination of education and experience.
8+ years of network engineering experience in federal or enterprise-level IT environments.
Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
Azure networking with network security groups (NSGs).
SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
Vulnerability remediation, TLS certificate renewal and installation, and change management processes.
Writing, maintaining and implementing network-security SOPs and technical documentation (required).
Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
Strong problem-solving, communication and organizational skills.
Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.
Preferred Qualifications
Experience supporting HHS or other federal civilian agency networks.
Current or recent federal Public Trust investigation.
CCNP, Palo Alto PCNSE, Zscaler or Cisco ISE certifications.
NetScaler / Citrix ADC exposure.