Full-Time
Network Engineer
Updated on 8/1/2026
Deadline 7/15/27
All Native Group
No salary listed
No H1B Sponsorship
Washington, DC, USA
In Person
Extensive travel is expected.
US Citizenship Required
Category
 DevOps & Infrastructure (1) |
|---|
Required Skills
Incident Response
Network Monitoring
Computer Networking
Requirements
- A minimum of 8 to 10 years of progressive network engineering experience, including senior or lead responsibilities in enterprise Cisco environments.
- Demonstrated experience providing Tier 3 and Tier 4 issue resolution.
- Proven experience leading security assessments, audits, and Zero Trust implementations.
- Extensive knowledge of network design, traffic engineering, and perimeter security.
- Expert-level Cisco routing, switching, and security architecture skills.
- Deep command of Zero Trust, Risk Management Framework, and continuous monitoring practices.
- Ability to operate independently with technical authority.
- A bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
- Cisco Certified Network Professional Enterprise certification is required and must have been maintained for a minimum of 5 years; expired certifications or certifications never used professionally will not be considered.
- The candidate must be a U.S. citizen or permanent resident.
- The position requires a Public Trust Tier 2 clearance, favorable Federal Bureau of Investigation criminal history and fingerprint checks, and a background check to access the Congressional Budget Office network.
- The candidate must successfully complete a pre-employment drug screen and is subject to random drug screens throughout employment.
Responsibilities
- Design, implement, operate, and optimize the Congressional Budget Office's Cisco-based network infrastructure for high availability, scalability, performance, and resilience.
- Implement and maintain network security controls aligned with National Institute of Standards and Technology Special Publication 800-53 and National Institute of Standards and Technology Special Publication 800-207 Zero Trust Architecture, including continuous monitoring and risk mitigation.
- Engineer and enforce Zero Trust principles through segmentation, micro-segmentation, and continuous verification of users and devices.
- Deploy and manage 802.1X port-based access control, role-based access, and integration with enterprise identity services.
- Manage and support routing, switching, and network services including virtual local area networks, Domain Name System, Dynamic Host Configuration Protocol, and virtual private networks with secure, standards-aligned configurations.
- Secure and manage public-facing and perimeter infrastructure, including firewalls, remote access, and edge devices.
- Implement and manage network monitoring, logging, and alerting integrated with enterprise security information and event management and network detection and response tools.
- Establish and maintain a structured device patching, firmware update, vulnerability remediation, and lifecycle management program.
- Serve as a senior technical advisor, leading or participating in security assessments, audits, and compliance reviews with evidence and remediation support.
- Perform root cause analysis for network incidents and implement corrective and preventive actions.
- Develop and maintain standard operating procedures, configuration baselines, and enterprise network diagrams, and conduct annual reviews and updates.
- Continuously evaluate and enhance the network security posture through emerging best practices, threat intelligence, and Cisco security innovations.
- Provide technical leadership and mentorship to network engineering staff without direct personnel-management authority unless designated in a task order.
- Travel extensively as required for the position.
Desired Qualifications
- Cisco Certified Internetwork Expert certification or Cisco Certified Network Professional Security certification is strongly preferred.