Network Engineer

Overview In this role you design, implement, and secure the CBO's Cisco-based enterprise network, applying Zero Trust principles and federal security standards. You will support core-to-edge infrastructure, ensuring reliability and secure access. You’ll drive incident-response support, vulnerability remediation, and network hardening while maintaining thorough documentation and diagrams. You will collaborate with cybersecurity, cloud, and IT teams to strengthen resilience and security at scale. This role offers impact through shaping secure, compliant network architecture for a federal agency. ResponsibilitiesSupport the implementation, operation, and optimization of the Cisco-based network across core, distribution, access, and edge layersEnforce Zero Trust through segmentation, micro-segmentation, and continuous verification of users and devicesDesign and implement least-privilege, role-based, and identity-aware access controls across all network layersManage 802.1X port-based access control to prevent unauthorized device connectionsConfigure, manage, and troubleshoot routing, switching, VLANs, DNS, DHCP, and VPNsCentralize logging and forward to SIEM platforms in line with retention requirementsSupport patching, firmware updates, and vulnerability remediationHarden devices using secure baselines and disable unnecessary servicesSupport incident response with network analysis, containment, and data collectionDevelop and maintain Network SOPs, baselines, and diagrams; conduct annual reviewsPerform root-cause analysis and support real-time monitoring integrationsAdvise on complex tickets, collaborating with cloud, Microsoft, and cybersecurity teams Key requirementsMinimum 5 years of professional network engineering experience in an enterprise Cisco environmentExperience with 802.1X, VLAN segmentation, DNS/DHCP, VPNs, and firewall managementExperience implementing NIST SP 800-53 and NIST SP 800-207 aligned controlsExperience supporting SIEM log forwarding and vulnerability remediation workflowsBachelor's degree in Information Technology, Computer Science, or related fieldCCNA required; CCNP Enterprise preferredCertifications maintained for at least 5 years; expired or never-used certifications not consideredclear written and verbal communicationanalytical troubleshooting and root cause analysisability to work with minimal supervision in a change-controlled environmentCisco enterprise routing and switchingZero Trust architecture and network access control802.1X, VLANs, DNS/DHCP, VPNs