Network Engineer (Cloud)

By Light Professional IT Services; Alexandria (VA); On-site; USD 50,000 - 65,000; Full time

Job summary

By Light Professional IT Services LLC is seeking a network administrator to support the global network infrastructure for government-related clients.

The role focuses on configuring multi-cloud VPCs, VPNs, and security controls across AWS, Azure, and on-prem environments, with a strong emphasis on network monitoring and problem solving.

Qualifications

• 2+ years of network administration experience.
• Experience with Arista routers/switches and Cisco ASA firewalls.
• Experience with VPNs and remote access configurations.
• Knowledge of TCP/IP, VLANs, and routing protocols (BGP/EIGRP/OSPF/RIP).

Responsibilities

• Assist in configuring and maintaining multi-cloud VPCs, subnets, route tables, and security groups under senior engineer supervision.
• Support monitoring and troubleshooting of multi-cloud network connectivity using CloudWatch, VPC Flow Logs, and other native tools.
• Aid in the setup of site-to-site VPNs and Direct Connect links between on-premises infrastructure and multi-cloud environments.
• Perform routine audits of network ACLs and security group rules to ensure compliance with organizational policies.
• Collaborate with cloud engineers to support hybrid network architecture and ensure consistent network performance across multi-cloud and on-prem environments.
• Document multi-cloud network configurations, changes, and topology diagrams for operational and compliance purposes.
• Assist in managing Elastic IP addresses, NAT gateways, and internet gateways to support scalable multi-cloud deployments.
• Participate in the implementation of AWS Transit Gateway configurations to optimize inter-VPC connectivity.
• Provide Tier 1 support for cloud network incidents and escalates complex issues to senior network or cloud engineers.
• Support the deployment and testing of network automation scripts using AWS CLI, CloudFormation, or Terraform under guidance.
• Proficient in using network management and monitoring platforms such as Arista CloudVision, Riverbed, NetFlow, TAPs, SPANs, AWS Network Manager, Azure Network Watcher, or equivalent third-party solutions for visibility, diagnostics, and topology tracking.
• Must be available for weekend and evening work if required.
• Must be able to document in detail all implementations and projects.
• Cloud or networking certifications (e.g., AWS Advanced Networking - Specialty, Azure Network Engineer Associate, or Cisco CCNP or equivalent) preferred.
• Ability to obtain and maintain a Public Trust.

Skills

Network administration

Cloud networking

Network security

VPN

Tools

Arista CloudVision

Riverbed

NetFlow

TAPs

SPANs

AWS CLI

CloudFormation

Terraform

AWS Network Manager

Azure Network Watcher

Job description

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

A hardworking, competitive type that is driven to succeed with a natural sense of urgency. You are a self-starter with a reputation for being an effective team player, who proactively looks to improve and add efficiency to current processes. You exercise judgment in the decision-making process in order to provide consistent customer service. You are highly proficient in problem solving and can follow a systematic troubleshooting approach.

The ideal candidate will be involved with the creation of procedures, identifying, troubleshooting and resolving problems, and assuring that requirements are met for new and existing systems in support of engineering and installation. This position provides hands on technical support and managerial direction for the global network infrastructure of a large Federal Government agency. Additionally, this individual should have experience with the setup and maintenance of VPN tunnels, vLAN configurations, wireless network configurations, IPv6 and IPv4 (including complex sub-netting) and network security (Cisco ASA Firewalls, ACLs, IPsec, and other encryption methodologies).

• Assist in configuring and maintaining multi-cloud VPCs, subnets, route tables, and security groups under senior engineer supervision.
• Support the monitoring and troubleshooting of multi-cloud network connectivity issues using CloudWatch, VPC Flow Logs, and other native tools.
• Aid in the setup of site-to-site VPNs and Direct Connect links between on-premises infrastructure and multi-cloud environments.
• Perform routine audits of network access control lists (ACLs) and security group rules to ensure compliance with organizational policies.
• Collaborate with cloud engineers to support hybrid network architecture and ensure consistent network performance across multi-cloud and on-prem environments.
• Document multi-cloud network configurations, changes, and topology diagrams for operational and compliance purposes.
• Assist in managing Elastic IP addresses, NAT gateways, and internet gateways to support scalable multi-cloud deployments.
• Participate in the implementation of AWS Transit Gateway configurations to optimize inter-VPC connectivity.
• Provide Tier 1 support for cloud network incidents and escalates complex issues to senior network or cloud engineers.
• Support the deployment and testing of network automation scripts using AWS CLI, CloudFormation, or Terraform under guidance.
• Proficient in using network management and monitoring platforms such as Arista CloudVision, Riverbed, NetFlow, TAPs, SPANs, AWS Network Manager, Azure Network Watcher, or equivalent third-party solutions for visibility, diagnostics, and topology tracking.
• 2+ years of network administration
• Experience with enterprise class Arista routers and switches, installation, configuration, hardware/software updates and patching, advanced troubleshooting skills, including the ability to capture and analyst packet level data (i.e. Wireshark PCAPS)
• Experience with network management tools such Arista CloudVision
• Experience with network monitoring tools, e.g., RiverBed, NetFlow, TAPs and SPANs
• Experience with VPN’s and other remote access applications
• Experience with wireless network configurations and installation
• Knowledge of Switches, Routers, Firewalls, LAN, WAN, TCP/IP, UDP, QoS
• Must demonstrate advanced understanding of TCP/IP including layer 2/3 VLANs and routing protocols such as BGP, EIGRP, OSPF, RIP
• Ability to express complex technical concepts effectively, both verbally and in writing
• Must be available for weekend and evening work if required
• Must be able to document in detail all implementations and projects
• Cloud or networking certifications (e.g., AWS Advanced Networking - Specialty, Azure Network Engineer Associate, or Cisco CCNP or equivalent)
• Ability to obatain and maintain a Public Trust

Salary Minimum $50,000

Salary Maximum $65,000

The annual base salary provided is a guideline for this position and is not a guarantee of compensation or salary. When extending an offer, By Light also considers other variables such as (but not limited to) work experience, education, training, skill set, internal peer equity, clearance level, and market conditions. In addition, By Light provides an extensive selection of benefits and offerings to our employees.

• Lift up to 50lbs
• Climb a ladder
• Run cabling