Senior Network Engineer

The Senior Network Engineer provides Tier‑3/Tier‑4 engineering expertise for design, implementation, troubleshooting, and optimization of the HSEN WAN and HQ LAN‑A infrastructure, ensuring ≥ 99.5 % availability for critical services. The role supports configuration management, change control, security patching, and incident response across routers, switches, firewalls, VPN/DMVPN/SD‑WAN, wireless, and cloud network components.

The objective of the support services for this project is to design, build, and maintain a cloud infrastructure with a focus on network security that supports the organization's technology and business needs. This involves architecting scalable, secure, and highly available cloud solutions, ensuring optimal performance and cost-efficiency in cloud environments such as AWS, Azure, and Google Cloud. The role requires close collaboration with other IT teams, stakeholders, and third-party vendors to deliver cloud-based infrastructure and services that align with organizational goals.

Key Tasks and Responsibilities

Core Engineering

• Engineer and implement upgrades to WAN/LAN per approved designs; validate in lab prior to production cut‑over.
• Perform advanced routing (OSPF/BGP/DMVPN/SD‑WAN), QoS, multicast, and segmentation.
• Integrate new security controls (NGFW, IDS/IPS, ZTNA) and support ATO evidence collection.

Operations & Support

• Provide Tier‑3 escalation and Tier‑4 manufacturer liaison for Priority‑1/2 incidents.
• Execute vulnerability remediation and patch management per DHS severity windows.
• Coordinate change‑management reviews and post‑implementation validation.

Process & Documentation

• Develop and maintain device configurations, SOPs, logical/physical diagrams in CMDB/ServiceNow.
• Generate weekly service‑request metrics, monthly availability, and root‑cause reports.

*Contribute to automation scripts (Ansible/Python) and network‑modernization prototypes.

This Role Provides Task Support for

• Operational Support
• Software Maintenance and Upgrades
• Telecommunications Maintenance (Data, Voice, Images, including Wireless) *
• Infrastructure Management Services (IMS)
• Configuration Management
• Network/Hardware Support
• IT Support (Tier 3 network support)
• Resource Management
• Backup and Recovery Management
• Installation, Configuration, and Tuning
• Electronic Software Licensing Services including license: deployment, management, tracking, upgrading, etc.
• Infrastructure System Management – Firewalls, etc.
• IT Operation and Maintenance Planning
• Data Quality Management
• Transformation Services
• Continual Service Improvement
• Balanced Scorecard for Operations
• IT Infrastructure Optimization

Education & Experience

• Minimum Qualifications (must have):

• Master’s degree in Information Technology, Network Engineering, or related field.
• 15 + years progressive network engineering in large enterprise WAN/LANs.
• Experience using various platforms such as SharePoint, JIRA, and Confluence for project management

• Preferred Qualifications:

• 10 + years supporting DHS WAN/LAN environments.
• Experience with DHS cloud networking and automation (Infrastructure as Code).
• Experience leading network modernization projects for DHS

Certifications

• Required Certifications: Active CCIE (Enterprise Infrastructure or Security).
• Preferred Certification: Cisco DevNet Professional, Palo Alto PCNSE, Juniper JNCIP, ITIL v4, or GIAC‑GCIH.

Security Clearance

• U.S. Citizen with ability to obtain DHS Public Trust / Full‑Scope BI.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

• Location: DHS HQ (NCR) with hybrid remote option; periodic travel (< 20 %).
• Schedule: Core hours 09:00 – 17:00 ET; on‑call rotation for after‑hours maintenance.
• Physical: Ability to rack/stack equipment up to 40 lbs.