Senior Network Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Engineer based in the United States.

• Design, deploy, maintain, and optimize enterprise and service-provider network infrastructure across on-premises, colocation, and cloud environments.
• Configure and operate BGP, OSPF, and other dynamic routing protocols, including route policies, redistribution, filtering, and traffic engineering.
• Manage upstream transit, internet peering, internet exchange, and routing relationships.
• Plan and manage IPv4/IPv6 addressing, subnetting, dual-stack deployments, ARIN/RIR resources, IRR, and RPKI.
• Implement and maintain network security controls including segmentation, firewalls, ACLs, VPNs, tunneling, access controls, and DDoS mitigation.
• Deploy and operate network monitoring, alerting, flow analysis, and observability platforms to maintain infrastructure health and performance.
• Automate network configuration, validation, provisioning, and deployment using Python, Bash, Go, Ansible, Terraform, or similar technologies.
• Lead troubleshooting and incident response for complex network issues, including packet-level analysis, root-cause investigations, and remediation.
• Perform capacity planning, infrastructure lifecycle management, maintenance windows, and network cutovers while minimizing customer impact.
• Maintain accurate network diagrams, IP and asset records, configurations, runbooks, and change documentation.
• Support compliance and audit activities by providing configuration evidence, addressing findings, and enforcing security baselines.
• Act as a senior technical escalation point for complex networking issues and provide mentorship to junior engineers.
• Work directly with customer technical contacts to understand requirements, communicate technical issues, and deliver effective solutions.

• 6+ years of professional network engineering experience in production environments, with exceptional candidates potentially qualifying through demonstrated technical ownership and relevant technical work.
• Expert knowledge of TCP/IP and hands-on production experience with BGP and at least one IGP such as OSPF, IS-IS, or EIGRP.
• Strong routing and switching fundamentals, including VLANs, trunking, spanning tree, link aggregation, QoS, MTU, and fragmentation.
• Hands-on experience with enterprise or carrier-grade platforms such as Cisco IOS/NX-OS, Juniper Junos, Arista EOS, MikroTik RouterOS, or equivalent technologies.
• Practical experience implementing and troubleshooting firewalls, IPsec, WireGuard, SSL VPNs, tunneling, and network access controls.
• Working knowledge of DNS, DHCP, NTP, TLS/PKI, and load-balancing technologies.
• Strong IPv4/IPv6 addressing, subnetting, and dual-stack networking experience.
• Strong Linux administration and command-line skills.
• Proven ability to troubleshoot complex network problems using tcpdump, Wireshark, packet captures, and flow data.
• Experience developing network automation and scripts using Python, Bash, Go, or similar languages.
• Experience with Git and configuration-as-code practices.
• Ability to work independently, manage competing priorities, and communicate clearly in a remote environment.
• Legally authorized to work in the United States without sponsorship and able to pass a background investigation.
• Willingness to participate in an on-call rotation and scheduled after-hours maintenance.
• A bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field is preferred; equivalent professional experience, military experience, certifications, or demonstrated technical expertise may substitute.
• Preferred experience includes federal government or contracting environments, particularly DHS, DoD, or civilian agencies.
• Active, prior, or eligible U.S. security clearance is a plus.
• Relevant certifications such as CCNP/CCIE, JNCIP/JNCIE, Arista ACE, Network+, or Security+ are preferred.
• Service-provider or ISP experience involving internet peering, transit, IXP operations, or RIR resource management is advantageous.
• Experience with RPKI, IRR, BGP origin validation, and route-security practices is a plus.
• Cloud networking experience with AWS, Azure, or GCP, including VPC/VNet design, transit gateways, ExpressRoute/Direct Connect, and hybrid connectivity, is preferred.
• Experience with Ansible, NAPALM, Nornir, Terraform, CI/CD, or other network automation frameworks is advantageous.
• Familiarity with NetFlow, sFlow, IPFIX, Prometheus, Grafana, LibreNMS, ELK, or SIEM integrations is a plus.
• Advanced security experience involving DDoS mitigation, IDS/IPS, threat modeling, deception, or traffic analysis is beneficial.
• Familiarity with SD-WAN, MPLS, VXLAN, or overlay networking technologies is preferred.
• Knowledge of NIST 800-53, FISMA, FedRAMP, CMMC, or similar compliance frameworks is advantageous.
• Open-source contributions, a public networking or systems portfolio, mentoring experience, or experience leading technical projects is a plus.