GTSC Bowen Group seeks a skilled Network Engineer to design, build, maintain, and sustain classified network infrastructure supporting enterprise IT operations across three geographically dispersed government sites, including two SCIF facilities serving TS/SCI users.
Location: Washington, DC metro area, with travel to program locations.
Security Clearance: Current Top Secret with SCI-eligibility and Special Access Programs (SAP) eligibility.
Travel: 25-50% travel to support activities across multiple program locations.
Certifications: CCNA, CCNP, Security+
Salary Range: $145,000-165,000.
Mission
This individual will work with cross-functional teams to ensure reliable, secure connectivity across multiple locations.
Qualifications
- 5+ years of network engineering experience, including in classified environments.
- Bachelor's degree in a related field or equivalent experience.
- Working knowledge of routing, switching, and network security fundamentals.
- Relevant certification (e.g., CCNA, CCNP, Security+).
- Familiarity with ICD 705 physical security standards for SCIF design and accreditation.
- Familiarity with the Risk Management Framework (RMF) per NIST SP 800-37 and NIST SP 800-53 for system security authorization.
Nice to Have:
- Experience supporting cross-domain or multi-level security network solutions.
- Experience deploying networks in newly constructed or renovated facilities.
- Demonstrated experience leading or supporting large, geographically dispersed teams.
- Experience supporting Special Access Program (SAP) facilities, systems, or environments.
Primary duties include:
- Design, implement, configure, test, maintain, and sustain enterprise network infrastructure and services across all sites.
- Develop logical and physical network designs based on performance, availability, security, and operational requirements.
- Engineer resilient connectivity across sites, datacenters, cloud, wide-area networks, and other distributed environments.
- Apply sound principles for addressing segmentation, routing, switching, traffic management, and access control.
- Monitor network health, capacity, latency, availability, and utilization.
- Troubleshoot complex network issues using structured analysis, packet-level inspection, telemetry, logs, and performance data.
- Establish redundancy, failover, fault isolation, and recovery mechanisms.
- Integrate network security controls consistent with zero-trust and defense-in-depth principles.
- Develop repeatable configurations, validation procedures, automation, and infrastructure-as-code practices.
- Maintain accurate diagrams, configurations, interface definitions, operating procedures, and change records.
- Participate in change management, incident response, root-cause analysis, and corrective-action planning.
- Collaborate with systems, network, cybersecurity, and operations teams.
- Evaluate technologies based on standards compliance, interoperability, lifecycle cost, supportability, and mission suitability.
- Design and implement network automation that standardizes configuration, testing, deployment, monitoring, and compliance while reducing human error and accelerating the delivery of reliable network services.
- Support design and integration of video teleconferencing (VTC) and conference room AV capability across all program sites, including classified and unclassified variants.
- Support network and security operations center (NOC/SOC) functions, including monitoring tools, coverage models, and 24x7 support where required.
FOUNDATIONAL SKILLS
- Network models, packet flow, encapsulation, and protocol behavior.
- IPv4 and IPv6 addressing, subnetting, name resolution, and address-management principles.
- Layer 2 and Layer 3 networking, routing, switching, and segmentation.
- Transport protocols, application traffic patterns, and quality-of-service principles.
- Network security, encryption, access control, secure remote access, and traffic inspection.
- Wide-area, datacenter, cloud, and software-defined networking concepts.
- High availability, redundancy, load distribution, and failure-domain design.
- Network monitoring, telemetry, logging, packet analysis, and performance engineering.
- Scripting, automation, version control, and configuration-management fundamentals.
- Structured troubleshooting and root-cause analysis.
TS/SCI clearance and SAP eligibility are required for this position. Only applicants with a current security clearance will be considered. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Special Access Program (SAP) Eligibility: Candidates must successfully complete security screening related to foreign contacts, foreign interests, foreign travel, personal conduct, and financial responsibility as part of the SAP access determination process.
BGLANDOVERY
Benefits
Benefits
We offer a comprehensive benefits package for Full-time Employees to include the following:
- Health, dental, vision insurance.
- Generous paid vacation and holiday leave.
- Flexible Spending Account (medical and dependent).
- 401(k) with employer match.
- Life insurance.
- Short-term and long-term disability.
- Tuition assistance and professional development opportunities.
GTSC Bowen Group is proud to be an equal opportunity employer, committed to recruiting, hiring, and promoting qualified people of all backgrounds, regardless of sex; race; color; creed; national origin; religion; age; marital status; pregnancy; physical, mental or sensory disability; sexual orientation; gender identity or any other basis protected by federal, state or local law.