Network Engineer

System One, Inc.; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Job summary

System One in Washington, DC, seeks a Contract Network Engineer to support DISA SCCA reference designs and advanced AWS networking, including TGW, VPC peering, Direct Connect and DC Gateway. The position blends onsite and remote work in a hybrid model for a defined project timeline.

You will deploy Palo Alto VM-Series NGFW, work with Prisma Access / SASE, and ensure NIPRNet ingress and BCAP readiness while enforcing DISA STIGs across network devices. Active DoD clearance is preferred.

Qualifications

• Active security clearance – DOD (recommended).
• Strong experience with DISA SCCA reference design implementation.
• Deep knowledge of AWS networking services (TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT).
• Familiarity with Palo Alto VM-Series NGFW and Prisma Access / SASE.
• Experience with NIPRNet ingress and BCAP protocols.
• Knowledge of DISA STIGs for network devices.
• Certifications: AWS Advanced Networking Specialty (preferred), Palo Alto PCNSE, DoD 8570/8140 IAT II.
• Experience with federal networks and SCCA implementation (strongly preferred).

Responsibilities

• Implement DISA Secure Cloud Computing Architecture (SCCA) reference design experience
• Apply AWS networking depth including TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT design
• Manage Palo Alto VM-Series NGFW deployment and configuration
• Utilize Prisma Access / SASE solutions and maintain NIPRNet ingress / BCAP familiarity
• Ensure compliance with DISA STIGs for network devices
• Design and oversee VDSS/VDMS boundary, RFC 1918, Direct Connect / DC Gateway, transit gateway architecture
• Implement boundary public-IP exposure controls and conduct network scans

Skills

AWS networking

DISA SCCA reference design

Direct Connect

VPC peering

TGW

Palo Alto VM-Series NGFW

Prisma Access / SASE

NIPRNet ingress

BCAP protocols

DISA STIGs

Job description

Job Title: Network Engineer
Location: Washington, D.C.
Type: Contract
Model: Hybrid – Onsite and Remote
Security Clearance: Active - DOD

Responsibilities

• Implement DISA Secure Cloud Computing Architecture (SCCA) reference design experience
• Apply AWS networking depth including TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT design
• Manage Palo Alto VM-Series NGFW deployment and configuration
• Utilize Prisma Access / SASE solutions and maintain NIPRNet ingress / BCAP familiarity
• Ensure compliance with DISA STIGs for network devices
• Design and oversee VDSS/VDMS boundary, RFC 1918, Direct Connect / DC Gateway, transit gateway architecture
• Implement boundary public-IP exposure controls and conduct network scans

Requirements

• Active security clearance – DOD (recommended)
• Strong experience with DISA SCCA reference design implementation
• Deep knowledge of AWS networking services (TGW, VPC peering, Direct Connect, DC Gateway, NAT/PAT)
• Familiarity with Palo Alto VM-Series NGFW and Prisma Access / SASE
• Experience with NIPRNet ingress and BCAP protocols
• Knowledge of DISA STIGs for network devices
• Certifications: AWS Advanced Networking Specialty (preferred), Palo Alto PCNSE, DoD 8570/8140 IAT II
• Experience with federal networks and SCCA implementation (strongly preferred)

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality.

We offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.