Sr. Principal Network Engineer

Role

We are seeking a highly skilled and cleared Network Engineer with expertise in configuring both cloud-based and hardware network devices using Infrastructure as Code (IaC) for classified government projects. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and efficient network infrastructures, ensuring the highest level of security and compliance with federal government standards. This role involves managing both on-premises and cloud environments in support of sensitive, mission-critical systems.

Responsibilities

• Design, configure, and manage classified cloud-based networking environments (AWS, Azure) and physical network devices (routers, switches, firewalls, etc.).
• Implement and maintain network infrastructure using Infrastructure as Code (IaC) tools such as Terraform and Ansible.
• Collaborate with development, security, and cloud engineering teams to integrate networking with CI/CD pipelines and infrastructure automation.
• Work closely with government stakeholders to design scalable and secure network architectures for evolving mission-critical needs.
• Ensure compliance with government security protocols (e.g., NIST, FISMA, DISA STIGs), implementing secure networking solutions such as VPNs, firewalls, and network segmentation.
• Perform vulnerability assessments, hardening of network devices, and risk management tasks to meet government compliance and security objectives.
• Troubleshoot complex network issues across classified environments, perform root-cause analysis, and implement corrective measures for network-related incidents ensuring minimal downtime.
• Document and maintain network architectures, configurations, and IaC scripts with special attention to classified data handling and security protocols.
• Assist with network capacity planning and scaling for hybrid cloud environments, ensuring both cloud and on-premises resources are properly integrated.
• Ensure compliance with industry standards and security best practices in network design, including the implementation of encryption, VPNs, and firewalls.
• Stay up-to-date with emerging technologies and industry trends to optimize and evolve the network architecture.

Required Qualifications

• Active U.S. Government Top Secret clearance (note, only US Citizens are eligible for security clearances)
• Bachelors degree in Computer Engineering, Information Technology, or a related technical discipline. Degree requirement can be met with four years of hands on experience in a software engineer or similar full time position
• 3-5+ years of experience in network engineering, including cloud-based and hardware network device configuration.
• Proficiency in using Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible, CloudFormation).
• Strong knowledge of secure network protocols (TCP/IP, BGP, OSPF, VLANs), firewall management, VPNs, and secure cloud networking.
• Hands-on experience with cloud networking in AWS, Azure, or private cloud environments, with strong knowledge of VPCs, security groups, and hybrid cloud networking (Direct Connect, ExpressRoute).
• Experience with automation and scripting languages (Python, Bash, PowerShell) for network management and troubleshooting.
• Strong understanding of security principles and best practices, including Zero Trust, network segmentation, and firewall rule management.
• Deep understanding of government security frameworks (NIST, FISMA, FedRAMP, DISA STIGs) and the ability to implement secure network designs within those standards.