Senior Network Engineer

Accountabilities

• • Design, deploy, maintain, and optimize enterprise and service-provider network infrastructure across on-premises, colocation, and cloud environments.
  • Configure and operate BGP, OSPF, and other dynamic routing protocols, including route policies, redistribution, filtering, and traffic engineering.
  • Manage upstream transit, internet peering, internet exchange, and routing relationships.
  • Plan and manage IPv4/IPv6 addressing, subnetting, dual-stack deployments, ARIN/RIR resources, IRR, and RPKI.
  • Implement and maintain network security controls including segmentation, firewalls, ACLs, VPNs, tunneling, access controls, and DDoS mitigation.
  • Deploy and operate network monitoring, alerting, flow analysis, and observability platforms to maintain infrastructure health and performance.
  • Automate network configuration, validation, provisioning, and deployment using Python, Bash, Go, Ansible, Terraform, or similar technologies.
  • Lead troubleshooting and incident response for complex network issues, including packet-level analysis, root-cause investigations, and remediation.
  • Perform capacity planning, infrastructure lifecycle management, maintenance windows, and network cutovers while minimizing customer impact.
  • Maintain accurate network diagrams, IP and asset records, configurations, runbooks, and change documentation.
  • Support compliance and audit activities by providing configuration evidence, addressing findings, and enforcing security baselines.
  • Act as a senior technical escalation point for complex networking issues and provide mentorship to junior engineers.
  • Work directly with customer technical contacts to understand requirements, communicate technical issues, and deliver effective solutions.

  Requirements

  • 6+ years of professional network engineering experience in production environments, with exceptional candidates potentially qualifying through demonstrated technical ownership and relevant technical work.
  • Expert knowledge of TCP/IP and hands-on production experience with BGP and at least one IGP such as OSPF, IS-IS, or EIGRP.
  • Strong routing and switching fundamentals, including VLANs, trunking, spanning tree, link aggregation, QoS, MTU, and fragmentation.
  • Hands-on experience with enterprise or carrier-grade platforms such as Cisco IOS/NX-OS, Juniper Junos, Arista EOS, MikroTik RouterOS, or equivalent technologies.
  • Practical experience implementing and troubleshooting firewalls, IPsec, WireGuard, SSL VPNs, tunneling, and network access controls.
  • Working knowledge of DNS, DHCP, NTP, TLS/PKI, and load-balancing technologies.
  • Strong IPv4/IPv6 addressing, subnetting, and dual-stack networking experience.
  • Strong Linux administration and command-line skills.
  • Proven ability to troubleshoot complex network problems using tcpdump, Wireshark, packet captures, and flow data.
  • Experience developing network automation and scripts using Python, Bash, Go, or similar languages.
  • Experience with Git and configuration-as-code practices.
  • Ability to work independently, manage competing priorities, and communicate clearly in a remote environment.
  • Legally authorized to work in the United States without sponsorship and able to pass a background investigation.
  • Willingness to participate in an on-call rotation and scheduled after-hours maintenance.
  • A bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field is preferred; equivalent professional experience, military experience, certifications, or demonstrated technical expertise may substitute.
  • Preferred experience includes federal government or contracting environments, particularly DHS, DoD, or civilian agencies.
  • Active, prior, or eligible U.S. security clearance is a plus.
  • Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Arista ACE, Network+, or Security+ are preferred.
  • Service-provider or ISP experience involving internet peering, transit, IXP operations, or RIR resource management is advantageous.
  • Experience with RPKI, IRR, BGP origin validation, and route-security practices is a plus.
  • Cloud networking experience with AWS, Azure, or GCP, including VPC/VNet design, transit gateways, ExpressRoute/Direct Connect, and hybrid connectivity, is preferred.
  • Experience with Ansible, NAPALM, Nornir, Terraform, CI/CD, or other network automation frameworks is advantageous.
  • Familiarity with NetFlow, sFlow, IPFIX, Prometheus, Grafana, LibreNMS, ELK, or SIEM integrations is a plus.
  • Advanced security experience involving DDoS mitigation, IDS/IPS, threat modeling, deception, or traffic analysis is beneficial.
  • Familiarity with SD-WAN, MPLS, VXLAN, or overlay networking technologies is preferred.
  • Knowledge of NIST 800-53, FISMA, FedRAMP, CMMC, or similar compliance frameworks is advantageous.
  • Open-source contributions, a public networking or systems portfolio, mentoring experience, or experience leading small technical teams are valued.

  Benefits

  • Annual compensation of $130,000–$150,000.
  • Medical, dental, and vision insurance.
  • 401(k) plan with company contribution.
  • Paid time off and federal holidays.
  • Professional development, certification, and training support.
  • Remote-first work environment for candidates authorized to work in the United States.
  • Opportunity to work on complex networking infrastructure across government and commercial environments.
  • Occasional travel to customer facilities, data centers, or company meetings.
  • Participation in an on-call rotation with scheduled after-hours maintenance and incident response.