SAIC has an opening for a Senior Network Engineer billet in Arlington, VA. SAIC is recognized as an IT leader in the intelligence and law enforcement spaces. This exciting opportunity will be supporting the United States Marshals Services' unique mission needs. We are seeking an individual who will be fully committed to the success of USMS programs and to bringing the best innovation, implementation, and attitudes to the position.
Description of Duties
The Senior Network Engineer serves as a technical leader responsible for design, implementation, operation, security, optimization, and lifecycle management of the enterprise network infrastructure. The candidate will engineer the secure network boundaries, access controls, and transport layers required to safely integrate the agency's enterprise Mobile Device Management (MDM) endpoints (iOS/Android devices).
Additionally, the candidate will
- Lead network design, project planning, budget estimations, lifecycle management, and migration/rollback strategies from planning through implementation.
- Install, configure, optimize, and maintain Cisco routers, switches, Voice/Video over IP (VoIP), Data Center, and Cisco Wireless networks using advanced protocols (BGP, OSPF, EIGRP, MPLS, VRF) and secure cloud network services
- Support enterprise unified communications infrastructure using Cisco CUCM, Unity Connection, SIP, CUBE, SRST, and VoIP QoS.
- Design and support data center networking solutions (Cisco Nexus, VXLAN, ACI, Virtual Switching, UCS) and bridge hardware to government cloud environments (AWS GovCloud / Azure Government).
- Architect secure network zones, gateways, and access controls to safely support traffic flow from enterprise Mobile Device Management (MDM) platforms (Microsoft Intune, VMware Workspace ONE, or MobileIron) into internal law enforcement networks.
- Configure and maintain Cisco Identity Services Engine (ISE), 802.1X, and Network Access Control (NAC) platforms to regulate enterprise perimeter access for mobile assets and field tech.
- Implement cybersecurity best practices, network segmentation, Layer 2 security, and Data Loss Prevention (DLP) controls in strict compliance with STIG, NIST 800-53, RMF, and Zero Trust Architecture directives.
- Engineer and troubleshoot secure site-to-site VPNs, TLS protocols, TACLANEs, and encrypted transport layers for field agents.
- Support vulnerability remediation efforts, security audits, and implement proactive monitoring/automation strategies utilizing SolarWinds, Cisco Catalyst Center (DNAC), SNMP, NetFlow, and REST APIs.
- Create and maintain 100% current network diagrams, topology mapping, SOPs, engineering standards, and change methodologies.
- Perform as a critical resource, technical liaison, and trusted advisor to customers, management, and external stakeholders regarding network capabilities, translating technical concepts into business language.
- Lead incident response, root cause analysis, backup systems, and disaster recovery planning/testing to maintain strict SLA uptimes.
- Provide technical guidance and conduct peer configuration reviews for junior engineers to promote engineering excellence and conduct quarterly knowledge-sharing sessions.
Required Experience / Skills / Attributes
- Education: Bachelor’s degree in an IT-related field.
- Experience: Minimum of 4+ years of hands-on experience with Cisco routers, switches, and deep expertise in LAN/WAN/WLAN facilities and protocols.
- Clearance & Citizenship: Active Secret clearance or above (USMS suitability requires U.S. Citizenship).
Required Certifications
- Cisco Certified Network Professional (CCNP) Enterprise (or equivalent).
Preferred Certifications
- Cisco CCIE or Cisco Certified Specialist designations.
- CISSP.
- AWS Solutions Architect Associate or Microsoft Azure Network Engineer Associate.
- ITIL Foundation.