Network Engineer- CBP with Security Clearance

Sherpa 6, Inc.; Ashburn (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Sherpa 6, Inc. is seeking a seasoned Network Engineer to design, implement, and support complex enterprise networks across on-prem, cloud, and OT environments in Ashburn, VA. You will troubleshoot routing, VPNs, firewalls, and IP services while maintaining documentation and change control.

Responsibilities include deploying network solutions for Watchtower OT devices, validating endpoints, and ensuring secure, scalable connectivity with robust testing in lab environments and field deployments.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, or a related field.
• 5+ years of progressively responsible experience in network engineering and related fields.
• Hands-on experience configuring routers, switches, firewalls, VPNs, wireless networks, and enterprise services.

Responsibilities

• Design, configure, implement, test, troubleshoot, optimize, and document network solutions.
• Configure and support routers, switches, firewalls, VPN gateways, wireless infrastructure, and related services.
• Support IPv4/IPv6 addressing, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPNs, and segmentation.
• Engineer network connectivity across on-premise, cloud, edge, mobile, and limited-connectivity environments.
• Analyze network paths to identify connectivity, latency, packet loss, routing, or firewall issues.
• Use diagnostic tools to isolate and resolve complex problems.
• Develop and maintain network diagrams, IP plans, and implementation documentation.
• Maintain configuration management, backups, version control, and deployment practices.
• Review network changes for dependencies, capacity, security, validation, sequencing, and rollback.
• Provide network support for Watchtower MDM platform and OT/tactical devices.
• Validate network requirements for Android, Windows, Linux, iOS, radios, sensors, wearables.
• Support enrollment, provisioning, policy delivery, certificates, remote management, compliance.
• Coordinate network test events with stakeholders and vendors.

Skills

Network engineering

TCP/IP

IPv4/IPv6

Routing

Switching

Firewall

VPN

DNS/DHCP

Network security

Lab testing

Documentation

Education

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Bachelor's degree in Cybersecurity

Bachelor's degree in Network Engineering

Tools

Wireshark

NetFlow

Job description

Work Location: Ashburn, VA (onsite) Travel Requirement: Up to 25% Citizenship: US Citizenship required Security Clearance: Must possess existing DHS EOD or DHS Suitability

Responsibilities: Network Engineering and Architecture

• Design, configure, implement, test, troubleshoot, optimize, and document network solutions supporting OTOC, Watchtower, operational technology, and tactical systems.
• Configure and support routers, switches, firewalls, VPN gateways, wireless infrastructure, and associated network services in lab and operational environments.
• Support IPv4/IPv6 addressing, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPNs, access control, and secure network segmentation.
• Engineer network connectivity across on-premise, cloud, edge, mobile, and disconnected or limited-connectivity environments.
• Analyze network paths and dependencies to identify connectivity, latency, packet loss, routing, name-resolution, firewall, VPN, or configuration issues.
• Use packet captures, logs, monitoring platforms, command-line tools, and other network diagnostic methods to isolate and resolve complex problems.
• Develop and maintain network diagrams, IP address plans, interface definitions, configuration baselines, port/protocol matrices, build records, and implementation documentation.
• Maintain network configuration management, backups, version control, standards, configuration baselines, and repeatable deployment practices.
• Engineer and review network changes for technical dependencies, capacity and performance impacts, security considerations, validation requirements, implementation sequencing, and rollback needs. Watchtower and Operational Technology Networking
• Provide network engineering and connectivity support for the Watchtower MDM platform and supported OT and tactical devices.
• Validate network requirements for Android, Windows, Linux, iOS, radios, sensors, wearables, and other supported endpoints.
• Support device enrollment, provisioning, policy delivery, certificate distribution, remote management, compliance reporting, and over-the-air updates by ensuring required network paths and services are available.
• Validate Watchtower communications across enterprise, wireless, VPN, cloud, edge, offline, and disconnected-use scenarios.
• Troubleshoot connectivity between Watchtower services, managed endpoints, identity services, certificate infrastructure, cloud resources, and other integrated systems.
• Support secure communications architectures and certificate-based connectivity using PKI, X.509 certificates, Certificate Authorities, and client/server certificate lifecycle processes. Network Laboratory Engineering and Testing
• Build, configure, and maintain representative network lab environments used to evaluate new technologies, network configurations, devices, software releases, and integration changes before operational fielding.
• Develop and execute network connectivity, interoperability, performance, failover, regression, and operational acceptance test procedures.
• Reproduce field network issues in the lab, collect diagnostic data, isolate root causes, validate fixes or workarounds, and document results.
• Validate routing, firewall rules, VPN connectivity, DNS/DHCP services, certificates, wireless connectivity, bandwidth requirements, and endpoint communications before deployment.
• Test network behavior under representative operational conditions, including degraded, edge, intermittent, or disconnected connectivity when applicable.
• Document test objectives, topology, configurations, procedures, results, defects, limitations, corrective actions, and deployment-readiness findings.
• Coordinate network test events with Systems Integrators, cybersecurity, OTOC support personnel, vendors, and government stakeholders. Network Implementation and Field Deployment
• Engineer and support the staging, configuration, validation, implementation, deployment, and fielding of network-enabled technologies to operational locations.
• Perform site and deployment readiness assessments to identify network connectivity, addressing, routing, firewall, VPN, wireless, power, rack/space, and other infrastructure dependencies.
• Prepare network configurations, deployment packages, diagrams, implementation plans, test checklists, validation procedures, and rollback procedures.
• Perform pre-deployment verification of network devices, firmware/software versions, configurations, certificates, accounts, connectivity, and external dependencies.
• Provide onsite or remote network support during installation, activation, acceptance testing, and transition to operations.
• Troubleshoot field network issues and coordinate corrective actions with systems integration, cybersecurity, carriers/service providers, vendors, and OTOC support teams.
• Capture as-built network configurations, fielding results, lessons learned, known issues, and follow-on actions.
• Support transition of fielded technology to OTOC operations by providing network documentation, troubleshooting guidance, knowledge transfer, and escalation procedures. Network Operations, Security, Performance, and Sustainment
• Monitor and assess network health, availability, utilization, performance, and connectivity using approved tools and methods.
• Provide Tier 2/Tier 3 network engineering support for incidents and problems requiring advanced protocol analysis, lab reproduction, configuration changes, performance analysis, or engineering coordination.
• Support incident, problem, and change management activities associated with network infrastructure, integrated systems, releases, deployments, and configuration changes.
• Perform root cause analysis for recurring or high-impact network issues and develop documented corrective and preventive actions.
• Coordinate with cybersecurity personnel to implement approved network security controls, segmentation, access restrictions, secure protocols, and remediation actions.
• Support network device lifecycle activities, including configuration, upgrades, patching, firmware updates, backup/restore, replacement, and decommissioning in accordance with approved processes.
• Maintain technical documentation, SOPs, troubleshooting guides, knowledge articles, network standards, and operational procedures.
• Provide technical briefings, demonstrations, knowledge transfer, and hands-on training to OTOC support personnel and government stakeholders as required. Requirements
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Systems Engineering, Communications, Business Technology, or a related field.
• 5+ years of progressively responsible experience in network engineering, network operations, enterprise networking, network architecture/design, operational technology networking, lab testing, technical fielding, or a related technical role.
• Demonstrated hands-on experience configuring and troubleshooting routers, switches, firewalls, VPNs, wireless networks, and enterprise network services.
• Strong knowledge of TCP/IP networking, IPv4/IPv6, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPN technologies, firewall concepts, and network segmentation.
• Experience using packet analysis, network monitoring, logging, command-line, and diagnostic tools to troubleshoot connectivity and performance issues.
• Experience engineering network connectivity for Windows, Linux, mobile endpoints, identity services, certificates, cloud platforms, and/or operational technology.
• Experience building or supporting network lab/test environments and executing structured connectivity, interoperability, regression, performance, failover, or acceptance testing.
• Experience preparing, configuring, validating, implementing, and fielding network infrastructure or network-enabled technology into operational or customer environments.
• Demonstrated ability to troubleshoot multi-vendor and cross-domain technical issues and coordinate resolution across network, systems, cybersecurity, application, and vendor teams.
• Ability to create and maintain network diagrams, IP plans, configuration records, implementation procedures, test plans, deployment checklists, troubleshooting guides, and knowledge articles.
• Strong written and verbal communication skills and the