Lead Network Engineer

Techgene Solutions; Rockville (MD); On-site; USD 135,000 - 195,000; Full time

Job summary

Techgene Solutions seeks an experienced Senior Network Engineer to serve as hands-on technical lead for HRSA’s enterprise network in Rockville, MD. You will manage a small team, engineer LAN/WAN, security infrastructure, and VPN access while coordinating with the client counterpart.

You will troubleshoot complex issues using PCAP analysis with Wireshark, perform upgrades, and ensure compliance with federal guidelines. The role emphasizes mentoring engineers and driving project delivery.

Qualifications

• Bachelor’s degree or equivalent experience.
• 10+ years of network engineering in federal or enterprise IT environments.
• 5+ years leading a team of network engineers while remaining hands-on.
• Expert troubleshooting of complex network issues, including PCAP analysis with Wireshark.
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
• Azure networking with network security groups (NSGs).

Responsibilities

• Serve as the hands-on technical lead for HRSA’s enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
• Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark PCAPs and monitoring tools to identify root cause.
• Plan and execute Cisco switch and firewall software upgrades during scheduled maintenance windows under change management.
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco ISE for network access control.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure NSGs.
• Drive vulnerability remediation and TLS certificate renewals; ensure compliance with federal and HHS policy.
• Own network-security SOPs, diagrams and documentation; coach and develop junior engineers.
• Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate procurement.

Skills

Leadership

Network troubleshooting

PCAP analysis

Client interaction

Hands-on lead

Education

Bachelor's degree or equivalent

Tools

Cisco ASA/Firepower

Palo Alto Panorama

Zscaler

Wireshark

SolarWinds

Riverbed

Grafana

Cribl

Cisco ISE

Azure NSGs

IPsec VPN

RADIUS/LDAP

Job description

• Serve as the hands-on technical lead for HRSA’s enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
• Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause.
• Plan and execute Cisco switch and firewall software upgrades, technology refresh and enhancements during scheduled maintenance windows under change management.
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE) for network access control.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
• Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy, including backup and recovery.
• Own network-security standard operating procedures (SOPs), network diagrams and technical documentation; coach and develop less-experienced engineers.
• Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware, software and vendor procurement.

Required Qualifications

• Bachelor’s degree or an equivalent combination of education and experience.
• 10+ years of network engineering experience in federal or enterprise-level IT environments.
• 5+ years leading a team of network engineers while remaining hands-on, and working directly with a client counterpart.
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
• Azure networking with network security groups (NSGs).