Network Engineer

SkyePoint Decisions; Vansville, Springfield (MD, VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holidays

Health insurance

Job summary

SkyePoint Decisions is seeking a Network Engineer to support a Department of State customer, focusing on hybrid cloud and on-prem networks across the U.S. This role involves day-to-day operations, design, and troubleshooting of complex networks with AWS/Azure/GCP, VPNs, and security controls. The position is hybrid, located in Beltsville, MD or Springfield, VA.

The candidate should bring 10+ years of experience, CCNA/CCNP/CCIE, cloud networking expertise, and strong security credentials. U.S.

Qualifications

• Bachelor's degree in a network engineering/computer engineering related discipline or equivalent.
• 10+ years IT network engineering and architecture experience with large, complex networks and cloud environments; Masters and 8+ years of related experience may substitute.
• Expertise in scalable, secure, high-performance enterprise networks (LAN/WAN/SD-WAN) and cloud integrations.
• Knowledge of BGP, OSPF, EIGRP, VPN technologies, and common tunneling protocols.
• Strong security experience including firewalls, VPNs, IDS/IPS, and zero-trust architectures.

Responsibilities

• Operate and maintain network, cloud infrastructure, and voice components across enterprise.
• Monitor, tune, and maintain network performance and availability.
• Troubleshoot incidents across on-prem and cloud environments.
• Design and document network solutions to meet requirements.
• Collaborate with architects to implement capacity-aware designs.
• Develop contingency plans for network outages and cloud disruptions.
• Provide guidance to developers and operations teams on network and cloud architectures.
• Train clients on network systems and cloud architectures.

Skills

Cisco certifications

Enterprise networking

Routing protocols

Security + zero-trust

Cloud networking

Cloud services knowledge

Automation scripting

Multi-cloud / hybrid

Security clearance

Starshield design

Education

Bachelor's degree in network/CS/engineering

10+ years IT network engineering experience

Masters with 8+ years experience

Tools

Cisco IOS/Networking hardware

Networking monitoring tools

Job description

8101 Odell Rd, Laurel, MD; Springfield, VA

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

SkyePoint Decisions is seeking a Network Engineer to support a Department of State (DOS) customer. This position primarily supports operations and maintenance of foreign post network integrations with the DoS Core and other network integrations comprising a large and complex network infrastructure and cloud environments, with engineering and design responsibilities as warranted.

This role offers a hybrid schedule (~3 days onsite) at the discretion of the customer. The role can be located in Beltsville, MD or Springfield, VA.

Responsibilities:

• Performs day-to-day operations and maintenance of network, cloud infrastructure, and voice components and systems across the enterprise.
• Monitors, tunes, sets standards, and maintains a range of network and cloud infrastructure to ensure optimal performance and availability.
• Uses monitoring, performance analysis, network management, software and hardware equipment to troubleshoot and isolate problems; gauge performance and activity across on-premises and cloud environments.
• Performs problem isolation and resolution for network incidents and service requests in support of global operations.
• Evaluates, designs, and documents network solutions as warranted to address operational requirements and customer needs.
• Works with Architects and engineering teams to design and implement solutions to operational problems within the capacity and operational limitations of installed equipment and cloud services.
• Develops and maintains contingency plans for network related hardware failures including isolated and major outages and cloud service disruptions.
• Provides internal consulting, technical guidance, information and support to application developers, computer operations, management, and departmental clients.
• Provides client consulting and training on the operation and use of network systems and cloud architectures.
• Plans, researches, evaluates and recommends new network equipment, cloud services, and related technologies – hardware and software.
• Designs and implements hybrid cloud network architectures integrating on-premises infrastructure with cloud platforms (AWS, Azure, Google Cloud) as needed.
• Configures and manages cloud networking components including virtual networks, subnets, security groups, load balancers, and cloud-native connectivity solutions.
• Implements and maintains secure connectivity between on-premises data centers and cloud environments using VPNs, Direct Connect, ExpressRoute, or similar technologies.

Required Qualifications:

• Bachelor's degree in a network engineering/computer engineering related discipline and 10+ years IT network engineering and architecture experience (Tier III and above, network infrastructure design and implementation) with large, complex networks and cloud environments; Masters and 8+ years of related experience; may accept additional experience in lieu of degree.
• Expertise in operating, maintaining, and supporting scalable, secure, and high-performance enterprise network architectures, including LAN, WAN, SDWAN, and cloud-based solutions.
• Cisco CCNA and/or CCNP and/or CCIE.
• Strong/Deep knowledge of Layer2/Layer3, routing and switching, tunneling, and networking protocols: BGP, OSPF, EIGRP, static, L2TP, IPSEC, VPN, DMVPN, GRE Spanning tree, etherchannel, vlan trunking, 802.1q, HSRP, VRRP, GLBP, VPC, MPLS, and VLANs, as well as experience with enterprise-grade routers and switches.
• Deep knowledge of Cisco switching and routing product lines.
• Proficiency in implementing and maintaining security measures, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and zero-trust architectures across on-premises and cloud environments.
• Strong experience in operations, support, and troubleshooting of large/complex networks end-to-end including hybrid cloud architectures.
• Experience operating and maintaining cloud network architectures in AWS, Azure, or Google Cloud Platform.
• Knowledge of cloud networking services such as AWS VPC, Azure Virtual Network, Transit Gateway, Cloud Interconnect, and related technologies.
• Must be a U.S. citizen.
• Active interim Secret clearance with the ability to obtain a Top Secret clearance.

Preferred Qualifications:

• Low Earth Orbit Satellite design including Starshield design and implementations.
• Firsthand experience in developing and providing quality assurance review of engineering change orders relating to the replacement or enhancement of perimeter security hardware and software.
• Experienced with performing root cause analysis, risk identification, and risk mitigation.
• Expert Knowledge of cabling standards, fiber optic and copper cable termination.
• Understanding of cutting-edge technologies such as SDN (Software-Defined Networking), IoT (Internet of Things), 5G, and cloud-native networking.
• Expert experience in one or more of the following: Unclassified Voice Systems, Secure Voice Systems to include red switch, TDM Switching, Voice Over IP (VOIP).
• Experience supporting the government customers in secure environments, familiarity of NIPRNET and SIPRNET operating standards and applicable guidelines.
• Industry-recognized certifications such as CCIE (Cisco Certified Internetwork Expert), CCNP (Cisco Certified Network Professional), CCDP, JDCI, CCVP, AWS Certified Advanced Networking, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, or similar cloud networking certifications.
• Familiarity with automation tools and scripting languages (e.g., Python, Ansible, Terraform, CloudFormation) to streamline network operations and reduce manual tasks in both on-premises and cloud environments.
• Expertise in network performance monitoring tools (e.g., NeuralStar, SolarWinds, Nagios, NetFlow, CloudWatch, Azure Monitor) and advanced troubleshooting techniques.
• Experience with Infrastructure as Code (IaC) tools for cloud network deployment and management.
• Knowledge of cloud security best practices, including network segmentation, encryption in transit, and cloud-native security services.
• Experience with multi-cloud and hybrid cloud architectures and connectivity solutions.
• Familiarity with DoS environment (data and voice networks, IT security systems, policies and procedures), Foreign Affairs Handbooks (FAHs), Foreign Affairs Manuals (FAMs).
• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent presentation skills.

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.

CCPA Disclosure Notice Here

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in SkyePoint Decisions’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.