Network Engineer

Insight Global; Providence Forge (VA); On-site; USD 115,000 - 170,000; Full time

Job summary

Insight Global is seeking a Senior Enterprise Network Engineer to design, implement, and operate secure network infrastructure across headquarters and regional sites. You will own end-to-end delivery of cross-functional initiatives, lead change governance, and drive automation using templates and IaC practices.

The role requires hands-on experience with Cisco routing/switching, firewalls, SD‑WAN, Zero Trust, and cloud networking, plus strong documentation and mentoring skills in a regulated

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• CCNP or PCNSE certificates or equivalent experience is required.
• Experience designing and operating enterprise Cisco environments and security controls.

Responsibilities

• Design, implement, and operate enterprise network infrastructure across HQ and sites.
• Lead RFC-driven cross-functional network initiatives and change governance.
• Mentor junior engineers and develop reusable templates and patterns.
• Document designs, runbooks, and operations plans for secure networks.

Skills

Routing & Switching

Wireless

SD‑WAN

Firewall

Cloud Networking

Zero Trust

Automation

Change Management

Education

Bachelor's degree in CS/IT or related

Tools

Cisco IOS/Catalyst

Jira/Confluence

Ansible/Terraform

Job description

Responsibilities

• We rely on a secure, resilient enterprise network to support critical business functions and to enable delivery for our customers worldwide. The successful candidate will join a dynamic, multidiscipline team responsible for the design, implementation, integration, and operation of enterprise network infrastructure spanning headquarters, regional offices, lab environments, and secure enclaves—including the CMMC-aligned environment used for handling Controlled Unclassified Information (CUI)
• Develop detailed technical and performance specifications for enterprise network solutions based on business needs, operational requirements, and constraints across diverse internal and external stakeholders.
• Research available technology options and their respective functional, performance, security, and interoperability characteristics; evaluate alternatives and select platforms accordingly.
• Produce detailed network architecture and design—covering routing, switching, wireless, firewalls, SD‑WAN, remote and site‑to‑site VPN, cloud networking, and segmentation—with integrated security controls and hardening; collaborate with the Network Architect and other senior team members to drive best practices across the enterprise.
• Own end-to-end delivery of cross-functional network initiatives via the team’s RFC (Request for Change) process: structure the problem, evaluate solutions, coordinate cross-team reviewers, and drive proposals through governance to implementation.
• Lead implementation and configuration of network components, including extensive use of templates and automation, in accordance with established change management policies and security baselines.
• Design and operate dedicated network segments and supporting controls (e.g., dedicated firewalls, isolated VLANs, encrypted transport) for regulated environments, including the CUI enclave.
• Plan, evaluate, and execute capacity optimization, updates, upgrades, and other lifecycle activities; troubleshoot complex infrastructure problems; provide escalation-level support for service availability and performance issues.
• Manage carrier and Internet service relationships and the underlying physical layer at the Tysons headquarters and other sites, including copper/fiber identification, demarcation, and coordination of moves/adds/changes with providers.
• Engineer site-to-site and customer-program connectivity (including private circuits for project delivery, such as transit and rail programs) in coordination with project teams.
• Create and maintain detailed and accurate system documentation, including design and configuration plans, network and system boundary diagrams, task‑oriented procedures, operations and maintenance plans, and runbooks.
• Mentor junior network engineers; review designs and changes from the team; contribute to standards, templates, and reusable patterns.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Qualifications:

• Routing, Switching & Wireless: Extensive hands‑on experience designing, deploying, and operating enterprise Cisco environments—including campus and data‑center switching, dynamic routing (OSPF, BGP), and enterprise wireless (Cisco Wireless or comparable). Proficient with Cisco Catalyst Center or equivalent controller‑based management.
• SD‑WAN & WAN: Practical experience designing and operating Cisco SD‑WAN (or comparable) including overlay/underlay architectures, transport diversity, and policy‑based routing; carrier‑service management, including coordination with ISPs and private‑circuit providers.
• Next‑Generation Firewall: Deep expertise with Palo Alto Networks NGFW administration and policy design, including Panorama‑based centralized management and AIOps for NGFW; advanced features such as App‑ID, User‑ID, decryption, IPS, and URL filtering.
• Cloud Networking: Proficient designing and supporting Azure networking constructs (VNets, peering, NSGs, Azure Firewall, Application Gateway/WAF, ExpressRoute or VPN gateways) and integrating cloud and on‑premises environments.
• Zero Trust & Remote Access: Working experience implementing Zero Trust Network Access (e.g., Zscaler) and modern remote‑access VPN; integration with identity providers (Active Directory, Entra ID) and conditional access.
• Monitoring & Observability: Familiarity with enterprise network management and observability platforms; able to design alerting, telemetry collection, and dashboards to support proactive operations and root‑cause analysis.
• Security & Compliance: Strong working knowledge of network security best practices and applicable frameworks (CIS Controls, ISO 27001, NIST SP 800‑171, CMMC v2.0 Level 2). Experience designing and operating networks that store, process, or transmit CUI.
• Automation & Change Management: Experience using configuration management and Infrastructure‑as‑Code tooling (e.g., Ansible, Terraform) in support of network operations; disciplined change management aligned to ITIL‑style practices.

Experience & Expertise

5+ years of progressive experience in enterprise network engineering, including hands‑on responsibility for design, implementation, and operations in complex, regulated environments. Proven ability to deliver secure, scalable, and automated network solutions.

• Advanced knowledge of secure configuration benchmarks and hands‑on experience in network device hardening.
• Thorough understanding of network infrastructure, concepts of operation, and protocols such as TCP/IP, BGP, OSPF, MPLS, DNS, DHCP, SNMP, Syslog, and IPSec.
• Working knowledge of endpoint security, SIEM, and vulnerability management as they integrate with network controls.
• Demonstrated time‑management and organizational skills while working in a fast‑paced, multidiscipline team environment.
• Strong analytical and problem‑solving skills.
• Strong oral and written communication skills, with the ability to author RFCs, design documents, and operating procedures for both technical and executive audiences.
• Proficiency with workflow and lifecycle management systems (e.g., Atlassian Jira and Confluence).

Education

• Bachelor’s degree in Computer Science, Information Technology, or a related Engineering Discipline.

Certification (one or more required; equivalent industry experience considered)

REQUIRED: CCNP or PCNSE (or comparable)

• Cisco CCNP Enterprise (or higher)
• Palo Alto Networks PCNSE
• Cisco SD‑WAN Specialist or equivalent SD‑WAN credential
• CompTIA Security•AWS or Azure networking certification (e.g., AZ-700)

Abilities:

• Exposure to computer screens for an extended period of time.
• Sitting for extended periods of time.
• Reach by extending hands or arms in any direction.
• Have finger dexterity in order to manipulate objects with fingers rather than whole hands or arms, for example, using a keyboard.
• Listen to and understand information and ideas presented through spoken words and sentences.
• Communicate information and ideas in speaking so others will understand.
• Read and understand information and ideas presented in writing.
• Apply general rules to specific problems to produce answers that make sense.
• Identify and understand the speech of another person.

115-170k