Network Engineer (Hybrid - Herndon, VA)

Serco; Chantilly (VA); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Job summary

Serco is seeking a highly skilled Senior Network Engineer to design, implement, and support a complex enterprise network spanning on-premises and Azure environments. The role requires deep Cisco, Meraki, Palo Alto, and GlobalProtect expertise, strong documentation skills, and a willingness to engage in 24/7 on-call rotations.

The position is hybrid, primarily in Herndon, VA, with responsibilities across distributed sites and GCCH/Azure networks, focusing on security and CMMC compliance.

Qualifications

• Bachelor’s degree or higher in a related field with 7+ years of network engineering experience.
• Cisco, Meraki, Palo Alto, and Azure networking expertise required.
• Must be eligible to obtain/maintain a Secret clearance; U.S. Citizenship required.
• Experience with regulated environments and CMMC is preferred.
• Ability to design, implement, and document complex network architectures across on-prem and cloud.

Responsibilities

• Design, implement, and maintain scalable, secure network architectures across sites and cloud environments.
• Lead network strategy across LAN/WAN, VPN, SD-WAN, and Azure connectivity.
• Architect and optimize Meraki and Cisco-based networks; support Palo Alto Firewalls and GlobalProtect.
• Provide Tier 3 support and incident response; participate in after-hours maintenance.
• Design and support Azure networking in Commercial and GCC High environments.
• Develop network diagrams, SOPs, runbooks, and change-management documentation.
• Collaborate with Cloud, Security, Infrastructure, and Application teams; guide junior engineers.

Skills

Cisco routing & switching

Meraki cloud networking

Palo Alto firewalls

GlobalProtect remote access

Azure networking

Network architecture

Documentation

Incident response

On-call rotation

Education

Bachelor’s degree in computer science / IT / related field

Master’s degree + 5 years experience

Associate’s degree + 9 years experience

High School Diploma + 11 years experience

Tools

Azure ExpressRoute

VPN/SD-WAN

Cisco/Meraki gear

Palo Alto firewalls

Job description

Position Description & Qualifications

We are seeking a highly skilled Senior Network Engineer with strong technical expertise and excellent communication skills to design, implement, and support a complex, multi-site enterprise network environment. This role requires deep knowledge across Cisco, Meraki, Palo Alto, GlobalProtect, and Azure networking, along with strong capabilities in architecture, documentation, and operational excellence. The ideal candidate will be able to effectively communicate with technical and non-technical stakeholders, drive design decisions, and document solutions clearly. This position requires rotating 24/7 on-call coverage for a full week on a shared team schedule.

This position is hybrid, reporting to the Herndon, VA office, and will support a geographically distributed infrastructure spanning on-premises, Azure Commercial, and Azure GCC High (GCCH) environments, with a strong focus on security and compliance, including CMMC requirements.

This position is contingent upon your ability to obtain/maintain an active Secret security clearance.

Key Responsibilities:

Network Architecture & Engineering

• Design, implement, and maintain scalable, secure network architectures across multiple sites and cloud environments
• Lead network strategy across LAN/WAN, VPN, SD-WAN, and cloud connectivity (Azure)
• Architect and optimize Meraki and Cisco-based network infrastructures
• Design and support Palo Alto firewalls and GlobalProtect remote access solutions

Operations & Support

• Provide Tier 3 support and troubleshooting for complex network issues across enterprise environments
• Support after-hours maintenance and incident response as needed
• Proactively monitor and improve network reliability, performance, and availability
• Lead and contribute to incident response, root cause analysis, and service restoration efforts

Cloud Networking

• Design and support Azure networking components across Commercial and GCC High (GCCH) environments, including VNets, peering, routing, NSGs, VPN Gateway, and ExpressRoute
• Ensure seamless connectivity between on-premises and cloud environments
• Align designs with security, compliance, and boundary requirements (CMMC)

Security & Compliance

• Implement and maintain network security aligned with enterprise and regulatory requirements, including CMMC
• Manage and optimize Palo Alto firewalls, security policies, and traffic inspection
• Enforce network segmentation and access control strategies to meet compliance standards

Documentation & Process Development

• Develop and maintain network diagrams, architecture documentation, SOPs, and runbooks
• Create and standardize build guides, procedures, and troubleshooting playbooks
• Ensure adherence to change management and documentation standards

Agile & Collaboration

• Participate in Agile-based workflows, including sprint planning and backlog refinement
• Collaborate with Cloud, Security, Infrastructure, and Application teams
• Provide technical leadership and guidance to junior engineers

Multi-Site & Vendor Coordination

• Manage network environments across multiple domestic and international locations
• Coordinate with vendors and service providers for circuits, hardware, and escalations
• Support site deployments, upgrades, and migration initiatives

To be successful in this role, you must have:

• Must be eligible to obtain/maintain a Secret security clearance
• U.S. Citizenship required
• Bachelor’s degree in computer science, Information Technology, or related field
• or a Master’s Degree and 5 years of experience
• or a High School Diploma and 11 years of experience
• or an Associate’s Degree and 9 years of experience
• At least 7 years of enterprise network engineering experience
• Expertise in Cisco routing & switching, Meraki cloud networking, Palo Alto firewalls and GlobalProtect, and Azure networking (Commercial and GCC High environments)
• Experience operating in regulated environments with CMMC or similar frameworks
• Proven experience managing multi-site enterprise network environments
• Strong troubleshooting, analytical, and communication skills
• Demonstrated experience producing clear technical documentation and procedures
• Ability to lift up to 50 lbs to support racking and stacking of network equipment
• Ability to work a rotating 24/7 on-call coverage for a full week on a shared team schedule
• Ability to travel up to 10% for site support and deployments

Preferred Qualifications:

• Relevant certifications (CCNP/CCIE, PCNSE, Azure Network Specialty)
• Experience with hybrid cloud architectures and secure boundary implementations
• Experience with data center migrations, including planning, execution, and cutover activities
• Familiarity with automation and scripting (Python, PowerShell)
• Experience with SD-WAN implementations and optimization
• Availability to support after-hours maintenance and critical incidents as required

What Success Looks Like

• Highly available, secure, and scalable network infrastructure across all environments
• Well-documented architectures and standardized procedures
• Strong alignment with security and compliance (CMMC) requirements
• Efficient incident response and reduced operational risk
• Effective collaboration and communication across engineering teams

Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.

To review Serco benefits please visit: https://careers.serco-na.com/us/en/what-we-offer . If you require an accommodation with the application process please email: [e-mail] or call the HR Service Desk at 800-628-6458, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.

Candidates may be asked to present proof of identity during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.

Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email [e-mail] .

Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Pay Transparency

Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance—so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.

Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.Benefits – Comprehensible benefits for full-time employees (part-time employees receive a limited package tailored to their role):

• Medical, dental, and vision insurance
• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
• 401(k) plan that includes employer matching funds
• Tuition reimbursement program
• Life insurance and disability coverage
• Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Employee Assistance Plan

To review all Serco benefits please visit: https://careers.serco-na.com/us/en/about-us .

Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations.