Senior Network Engineer- W2 Consultants

About this role

Job Title: Senior Network Engineer Location: Onsite, Rockville, MD

Certification: None required; CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco ISE certifications preferred Work Schedule: Onsite Monday–Friday, business hours. Scheduled maintenance windows (e.g., Tuesdays 6–8 p.m. ET), with upgrades on weekends and some Fridays; onsite after-hours/weekend maintenance about every 9 weeks; on-call rotation about every 10 weeks Start Date: Immediate Job Summary ·        Serve as a hands-on senior engineer on HRSA’s enterprise network team, working with the technical lead, project managers and HRSA stakeholders. ·        Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems. ·        Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations. ·        Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE). ·        Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl. ·        Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs). ·        Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management. ·        Maintain network-security SOPs, network diagrams and technical documentation, support backup, recovery and federal and HHS policy compliance. ·        Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement. Required Qualifications ·        Bachelor’s degree or an equivalent combination of education and experience. ·        8+ years of network engineering experience in federal or enterprise-level IT environments. ·        Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama. ·        Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6. ·        Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark. ·        Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE). ·        RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP). ·        Azure networking with network security groups (NSGs). ·        SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting. ·        Vulnerability remediation, TLS certificate renewal and installation, and change management processes. ·        Writing, maintaining and implementing network-security SOPs and technical documentation (required). ·        Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required). ·        Strong problem-solving, communication and organizational skills. ·        Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years. Preferred Qualifications ·        Experience supporting HHS or other federal civilian agency networks. ·        Current or recent federal Public Trust investigation. ·        CCNP, Palo Alto PCNSE, Zscaler or Cisco ISE certifications. ·        NetScaler / Citrix ADC exposure.