Network Engineer

GRVTY; Chantilly (VA); On-site; USD 150,000 - 250,000; Full time

Benefits offered by this job

Robust health plan including medical,…

Health Savings Account with company...

Annual Paid Time Off and Paid Holidays

Paid Parental Leave

401k with generous company match

Training and Development Opportunities

Award Programs

Variety of Company Sponsored Events

Job summary

GRVTY, in Chantilly, VA, seeks a Network Engineer with TS/SCI + Poly clearance to secure and optimize a VMware Horizon-based VDI environment. The role covers firewall administration, VPNs, AD/GPO enforcement, and zero-trust network segmentation to protect endpoints and data.

Candidates will manage OpenVPN/IPsec VPNs, VLANs, and ManageEngine patching, while integrating automation for policy enforcement and system tasks in a high-security environment.

Qualifications

• > Active TS/SCI with Polygraph clearance required.
• > Hands-on firewall administration and access control experience.
• > Experience with VPN tunneling and secure remote access.
• > Experience securing and managing endpoint devices and mobile emulation environments (BlueStacks).

Responsibilities

• Manage security and performance of VDI infrastructure and networking components.
• Enforce firewall policies, VPNs, network segmentation, and endpoint policy enforcement.
• Configure and optimize Palo Alto, Cisco Firepower, and Nexus hardware and software.
• Develop automated scripts for policy enforcement and system management.
• Design and maintain VMware Horizon-based VDI environments with vSphere and HyperFlex.
• Support Windows, Linux, and Android emulation environments and AD-integrated controls.

Skills

TS/SCI with Polygraph Clearance

Firewall administration

Network Access Control

VPN tunneling

Endpoint security

Mobile emulation environments

Tools

Palo Alto PA-3430

Cisco Firepower 2130s

Nexus switches

OpenVPN

Active Directory

Group Policy Objects

Job description

What Impact You'll Have

The qualified and successfully hired Network Engineer will be responsible for:

• Managing security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement
• Ensuring network and endpoint systems are secure, efficient, and compliant
• Managing Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations
• Configuring OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment
• Segmenting networks using VLANs and Access Control Lists in a Zero Trust model
• Implementing network segmentation strategies to enhance security and minimize the attack surface
• Endpoint provisioning, patching, and hardening via ManageEngine, to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up to date
• Administering Windows 11, Linux, and BlueStacks
• Managing and supporting endpoint operating systems and Android emulators to ensure they meet performance and security standards
• Enforcing GPOs and AD-integrated access controls
• Implementing and managing Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions
• Developing and deploying automation scripts to streamline policy enforcement and system management tasks
• Designing, deploying, and optimizing a VMware Horizon-based VDI environment using vSphere and Cisco HyperFlex, including Android emulation, golden image management, and GPU virtualization, to ensure a secure, scalable, and high-performance virtual desktop infrastructure
• Architecting and maintaining a scalable, secure VMware Horizon-based VDI platform
• Managing and optimizing Cisco HyperFlex hyperconverged infrastructure, including compute, storage, and network stack, to support the VDI environment
• Designing, optimizing, and managing golden images for Windows 11 and Linux
• Creating and maintaining standardized images for virtual desktops, ensuring they are optimized for performance and security
• Implementing GPU virtualization to enhance the performance of Android emulators used within the VDI environment
• Developing and deploying automation scripts and workflows to streamline the provisioning and updating of virtual desktops

What Impact You'll Have

The qualified and successfully hired Network Engineer will be responsible for:

• Managing security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement
• Ensuring network and endpoint systems are secure, efficient, and compliant
• Managing Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations
• Configuring OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment
• Segmenting networks using VLANs and Access Control Lists in a Zero Trust model
• Implementing network segmentation strategies to enhance security and minimize the attack surface
• Endpoint provisioning, patching, and hardening via ManageEngine, to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up to date
• Administering Windows 11, Linux, and BlueStacks
• Managing and supporting endpoint operating systems and Android emulators to ensure they meet performance and security standards
• Enforcing GPOs and AD-integrated access controls
• Implementing and managing Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions
• Developing and deploying automation scripts to streamline policy enforcement and system management tasks
• Designing, deploying, and optimizing a VMware Horizon-based VDI environment using vSphere and Cisco HyperFlex, including Android emulation, golden image management, and GPU virtualization, to ensure a secure, scalable, and high-performance virtual desktop infrastructure
• Architecting and maintaining a scalable, secure VMware Horizon-based VDI platform
• Managing and optimizing Cisco HyperFlex hyperconverged infrastructure, including compute, storage, and network stack, to support the VDI environment
• Designing, optimizing, and managing golden images for Windows 11 and Linux
• Creating and maintaining standardized images for virtual desktops, ensuring they are optimized for performance and security
• Implementing GPU virtualization to enhance the performance of Android emulators used within the VDI environment
• Implementing automation workflows for desktop deployment and updates
• Developing and deploying automation scripts and workflows to streamline the provisioning and updating of virtual desktops

What You’ll Be Owning

GRVTY is seeking a Network Engineer with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Chantilly, VA. The ideal Network Engineer will have subject matter expertise in technical risk analysis of IT systems and networks, mobile and wireless networks, cloud-based computing, network management platforms, communication protocols, scripting or programming products, configuration scripts, and IT hardware and software products in support of Sponsor's risk assessment activities.

What You Must Have

• Active TS/SCI with Polygraph Clearance
• Demonstrated hands on experience with firewall administration, Network Access Control, and Access Controls.
• Demonstrated experience with VPN tunneling.
• Demonstrated experience with endpoint security and mobile emulation environments.
• Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.

What Would Be Nice To Have

• Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+.
• Demonstrated experience collaborating with cybersecurity and VDI teams, Sponsor or otherwise.
• Demonstrated experience providing training and support.
• Demonstrated experience developing and maintaining network and endpoint security policies and procedures.
• Demonstrated experience conducting regular security assessments.
• Demonstrated experience implementing Zero Trust security model.

Pay Range:

At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications.

We're proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth.

Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

Virginia Pay Range

$150,000-$250,000

Pay Range:

At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications.

We're proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth.

Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

Why Choose GRVTY

The toughest national security challenges demand vision and ingenuity, not just resources. We deliver mission and technical expertise to outpace our adversaries. We're purpose-built to tackle the most entrenched, systemic national security issues around the world.

We partner with our customers to help them overcome challenges in every corner of technology and defense—including the ones still being explored. Our growing capabilities create complementary advantages, giving on-the-ground operations the edge they need to succeed. We muster everything we have to answer every challenge presented, every day of our lives.

At GRVTY, we believe that when our employees thrive, our company thrives. That's why we offer a comprehensive and competitive benefits package designed to support your well-being, growth, and work-life balance.

• Robust health plan including medical, dental, and vision
• Health Savings Account with company contribution
• Annual Paid Time Off and Paid Holidays
• Paid Parental Leave
• 401k with generous company match
• Training and Development Opportunities
• Award Programs
• Variety of Company Sponsored Events

EEO Statement

GRVTY, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability.

Anyone requiring reasonable accommodations should [e-mail] call 703-544-7930 with requested details. A member of the HR team will respond to your request within 2 business days.

Know Your Rights: Workplace Discrimination is Illegal (eeoc.gov)