Network Engineer

BayNova; Alexandria (VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

BayNova is seeking a Network Engineer to join our IT Infrastructure Team, supporting a federal government customer. The role is hybrid, with 1 to 3 days on-site in Alexandria, VA, and remote work otherwise.

The engineer will create procedures, troubleshoot, and ensure requirements are met for network engineering and installation across on-prem and cloud environments. Ideal candidates will handle hybrid network design, cloud connectivity, IPv6/IPv4 subnetting, and security controls, including

Qualifications

• 4+ years of network administration experience.
• Hybrid cloud and on-prem networks experience.
• VPNs and cloud-native access services familiarity.
• US Citizenship required.
• Strong documentation skills.

Responsibilities

• Supports design and implementation of hybrid enterprise network architecture.
• Maintains hybrid network integrity and connectivity with policy compliance.
• Collaborate with system engineers to ensure performance across cloud and on-prem.
• Document configurations and topology diagrams for operations and compliance.
• Provide escalated support for hybrid network incidents.
• Configure site-to-site VPNs and Direct Connect links to cloud.
• Configure and maintain cloud-based networks and security controls.
• Monitor and troubleshoot cloud network connectivity using logging and flow analysis tools.
• Audit ACLs and security group rules for policy compliance.
• Manage NAT and public IP resources for scalable cloud deployments.
• Implement cloud transit networking across regions and accounts.
• Support IaC scripts using Terraform.
• Maintain and upgrade on-prem components like routers, switches, firewalls.

Skills

Network engineering

Cloud networking

VPNs

IPv6

Firewall security

Subnetting

Tools

Riverbed

NetFlow

TAPs

SPANs

AWS Network Manager

Azure Network Watcher

Cisco Prime

Wireshark

VPC Traffic Mirroring

Job description

BayNova is seeking a Network Engineer to join our IT Infrastructure Team in support of a federal government customer. This is a hybrid role, primarily performed remotely however will work on rotation with 1 to 3 days per week on-site in Alexandria, VA.

The ideal candidate will be involved with the creation of procedures, identifying, troubleshooting and resolving problems, and assuring that requirements are met for new and existing systems in support of network engineering and installation. This position provides hands on technical support and managerial direction for the enterprise network infrastructure of a large Federal Government agency. Additionally, this individual should have experience with the implementation and maintenance of cloud networks, VPN tunnels, vLAN configurations, wireless network configurations, IPv6 and IPv4 (including complex sub-netting) and network security (e.g., Cisco ASA Firewalls, ACLs, IPsec, and other encryption methodologies).

Job Responsibilities

• Supports the design and implementation of hybrid enterprise network architecture.


• Maintains hybrid network integrity and connectivity while ensuring compliance with policies and maintains system backup and recovery capability.


• Collaborate with system engineers to support hybrid network architecture and ensure consistent network performance across cloud and on-prem environments.


• Document hybrid network configurations, changes, and topology diagrams for operational and compliance purposes.


• Provide escalated support for hybrid network incidents.


• Configure site-to-site VPNs and Direct Connect links between on-premises infrastructure and cloud environments.


• Configuring and maintaining cloud-based virtual networks, subnets, routing configurations, and network security controls.


• Support the monitoring and troubleshooting of cloud network connectivity issues using native logging, monitoring, and flow analysis tools.


• Perform routine audits of network access control lists (ACLs) and security group rules to ensure compliance with organizational policies.


• Manage public IP resources, network address translation (NAT), and internet connectivity components to support scalable cloud deployments.


• Implement cloud transit networking solutions to optimize connectivity between virtual networks across regions and accounts.


• Support the deployment and testing of network automation scripts using command-line tools and infrastructure-as-code (IaC) frameworks such as Terraform.


• Independently performs maintenance and upgrade of on-perm networks components including appliances, routers, switches, firewalls, and remote access systems.

Job Requirements:

• 4+ years of network administration


• Proficient in using network management and monitoring platforms such as Riverbed, NetFlow, TAPs, SPANs, AWS Network Manager, Azure Network Watcher, or equivalent third-party solutions for visibility, diagnostics, and topology tracking.


• Experience configuring and supporting secure remote access solutions in hybrid environments, including site-to-site VPNs, client VPNs, and cloud-native access services (e.g., AWS Client VPN, Azure VPN Gateway, Zero Trust solutions).


• Experience with cloud-native and virtual network appliances for routing, switching, and traffic management, including deployment, configuration, and troubleshooting using packet capture and analysis tools (e.g., VPC Traffic Mirroring, Wireshark).


• Experience in the end-to-end design and implementation of on-premises network infrastructure for enterprise environments, including market research, equipment selection, configuration, and deployment from the ground up.


• Experience with enterprise class routers and switches, installation, configuration, hardware/software updates and patching, advanced troubleshooting skills, including the ability to capture and analyst packet level data (i.e. Wireshark PCAPS)


• Experience with network management tools (e.g., Cisco Prime).


• Experience with wireless network configurations and installation.


• Knowledge of Switches, Routers, Firewalls, LAN, WAN, TCP/IP, UDP, QoS.


• Must demonstrate advanced understanding of TCP/IP including layer 2/3 VLANs and routing protocols such as BGP, EIGRP, OSPF, RIP.


• Ability to express complex technical concepts effectively, both verbally and in writing.


• Must be available for weekend and evening work if required.


• Must be able to document in detail all implementations and projects.


• Must be a US Citizen.

Desired Certifications

• Cloud or networking certifications (e.g., AWS Advanced Networking - Specialty, Azure Network Engineer Associate, or Cisco CCNP)