Hybrid Secure Network Engineer — Zero Trust (Cisco)

Innovim; Washington, Northern (District of Columbia, KY); Hybrid; USD 92,000 - 110,000; Full time

Job summary

Innovim is seeking a Network Engineer to provide secure engineering and operational support for a Cisco-based enterprise network within a U.S. legislative branch agency. The role emphasizes Zero Trust, least-privilege access, and continuous monitoring in compliance with NIST standards.

The position offers hybrid work in Washington, DC, with potential on-site requirements and opportunities for data-center involvement in Ashburn, VA. Requires 8+ years of Cisco experience and U.S.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 8+ years of hands-on enterprise network engineering in Cisco environments.
• Proficiency in routing, switching, VLANs, DNS/DHCP, VPNs, and 802.1X network access control.
• Knowledge of NIST SP 800-53 controls and NIST SP 800-207 Zero Trust Architecture.
• Active Cisco certification (CCNP or CCNA) or equivalent demonstrable expertise.
• U.S. citizenship or permanent residence status; ability to obtain a Public Trust (Tier 2).

Responsibilities

• Operate, optimize, and troubleshoot Cisco core, distribution, access, and edge network infrastructure.
• Configure routing, switching, VLANs, DNS, DHCP, and VPN services securely.
• Implement and maintain network security controls aligned with NIST SP 800-53 (AC, CM, SC, AU).
• Enforce Zero Trust architecture with segmentation and least-privilege access.
• Deploy and manage 802.1X NAC and identity-aware access across all layers.
• Harden devices to secure baselines and MFA for admin access.
• Configure centralized logging and forward logs to the enterprise SIEM; support 24/7 monitoring.
• Conduct vulnerability assessments aligned with RMF; coordinate patching.
• Support incident response with network-level analysis and data collection.
• Develop network diagrams, baselines, and SOPs.
• Serve as adviser on tickets with cloud, Microsoft, and cybersecurity teams.

Skills

Routing & Switching

VLANs

VPNs

Zero Trust

Security best practices

Incident response

Education

Bachelor's degree in CS/IT/Engineering

Tools

Cisco CCNP/CCNA

Cisco ISE

Check Point / Palo Alto

Microsoft Sentinel / Splunk

SolarWinds

Job description

Innovim is seeking a Network Engineer to provide secure engineering and operational support for a Cisco-based enterprise network within a U.S. legislative branch agency. The role emphasizes Zero Trust, least-privilege access, and continuous monitoring in compliance with NIST standards.

The position offers hybrid work in Washington, DC, with potential on-site requirements and opportunities for data-center involvement in Ashburn, VA. Requires 8+ years of Cisco experience and U.S.