Network Engineer

All Native Group, The Federal Services Division of Ho-Chunk Inc.; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

All Native Group seeks a Network Engineer to support the Congressional Budget Office's Cisco-based enterprise network, enforcing Zero Trust, segmentation and least-privilege access. The engineer will design, implement, and maintain secure network architectures and continuously monitor devices in line with federal standards and Cisco best practices.

The role collaborates with security and IT teams to remediate findings, support incident response, and produce network SOPs and diagrams.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field; or equivalent professional experience.
• CCNA certification required; CCNP Enterprise preferred.
• 5+ years of professional network engineering experience in an enterprise Cisco environment.

Responsibilities

• Support Cisco-based network infrastructure across core, distribution, access, and edge layers for reliability and availability.
• Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207 Zero Trust Architecture.
• Enforce Zero Trust through segmentation, micro-segmentation, and least-privilege access.
• Manage 802.1X, VLAN segmentation, DNS/DHCP, VPNs, and firewall management.
• Configure routing, switching, VLANs, and network services; monitor and harden devices.
• Develop SOPs, baselines, and network diagrams; perform root cause analysis for incidents.
• Support incident response with network-level analysis and forensic data collection.

Skills

Cisco routing

Cisco switching

Zero Trust

Troubleshooting

Documentation

Education

Bachelor's degree in IT / CS or related field

CCNA certification required

CCNP Enterprise preferred

Job description

All Native Group, a division of Ho Chunk Incorporated, is seeking a Network Engineer to provide engineering and operational support for the Congressional Budget Office's (CBO) Cisco-based enterprise network. The Network Engineer designs, implements, and maintains secure network architectures that enforce Zero Trust principles, including network segmentation, micro‑segmentation, and least‑privilege access controls, while hardening and continuously monitoring switches, routers, and perimeter systems in accordance with federal security standards and Cisco best practices. This role supports the remediation of identified Incident Response findings and strengthens the security, reliability, and resilience of the network infrastructure.

Essential Functions

• Support the implementation, operation, and optimization of CBO's Cisco‑based network infrastructure across core, distribution, access, and edge layers to ensure reliability, performance, and availability.
• Implement and maintain network security controls aligned with NIST SP 800‑53 (AC, CM, SC, and AU control families) and NIST SP 800‑207 Zero Trust Architecture.
• Enforce Zero Trust principles through network segmentation, micro‑segmentation, and continuous verification of users and devices.
• Design and implement least‑privilege, role‑based, and identity‑aware network access controls across all network layers.
• Manage 802.1X port‑based network access control to prevent unauthorized device connectivity and enforce authentication at the network edge.
• Configure, manage, and troubleshoot routing, switching, and network services including VLANs, DNS, DHCP, and VPNs.
• Configure and maintain centralized logging and audit capabilities, forwarding logs to enterprise SIEM platforms in accordance with retention requirements.
• Support network device patching, firmware updates, and vulnerability remediation to keep infrastructure secure and compliant.
• Harden network devices using secure configuration baselines (e.g., Cisco Secure Configuration Guides), disabling unnecessary services and securing management interfaces.
• Support incident response with network‑level analysis, containment actions, and forensic data collection.
• Develop and maintain Network Standard Operating Procedures (SOPs), configuration baselines, and network diagrams; conduct annual reviews and updates.
• Perform root cause analysis for network incidents and support continuous, real‑time (24/7) monitoring integrations.
• Serve as a technical adviser for complicated service desk tickets, collaborating with cloud, Microsoft engineering, and cybersecurity teams.

Competencies

• Strong knowledge of Cisco enterprise routing and switching.
• Working understanding of Zero Trust architecture and network access control.
• Analytical troubleshooting and root cause analysis.
• Clear written and verbal communication and documentation discipline.
• Ability to work with minimal supervision in a change‑controlled environment.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high‑stress decision‑making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type/Expected Hours of Work

This is a full‑time executive position with flexible hours based on mission requirements.

Travel

Extensive travel is expected for this position.

Experience

• Minimum of 5 years of professional network engineering experience in an enterprise Cisco environment.
• Demonstrated experience with 802.1X, VLAN segmentation, DNS/DHCP, VPNs, and firewall management.
• Experience implementing NIST SP 800‑53 and NIST SP 800‑207 aligned controls.
• Experience supporting SIEM log forwarding and vulnerability remediation workflows.

Education

Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

• Cisco Certified Network Associate (CCNA) required; Cisco Certified Network Professional (CCNP Enterprise) preferred.

Certifications

Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered.

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre‑employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

AAP/EEO Statement

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.