Network Engineer (Senior)

Amatriot Group, LLC; Chantilly (VA); On-site; USD 100,000 - 146,000; Full time

Job summary

Amatriot Group, LLC is seeking a Senior Network Engineer to lead design, implementation, modernization, and optimization of resilient, secure network infrastructure supporting mission-critical operations in Chantilly, VA.

This role provides technical leadership in network architecture, zero-trust, performance optimization, and secure communications across complex multi-enclave environments. Collaboration with security, architecture, and operations teams is essential.

Qualifications

• Minimum 8 years of relevant experience in enterprise networking and security.
• Experience designing and supporting enterprise network environments and zero-trust architectures.
• Experience in mission-critical, highly secure, or regulated environments.

Responsibilities

• Design and implement enterprise network architectures for secure, mission-critical operations.
• Lead zero-trust design initiatives and cross-enclave interoperability.
• Drive network modernization aligned with enterprise strategy and zero-trust principles.
• Provide technical leadership for network infrastructure planning and implementation.
• Support VMware/Broadcom virtualization and storage technologies.
• Manage monitoring, identity management, and platform support across networks.

Skills

Routing & Switching

Network Security

VPNs

Access Control

Troubleshooting

Leadership

Documentation

Education

Master’s degree in Information Technology, Network Engineering, Cybersecurity, or related field

Tools

Splunk

Nginx

Confluence

Jira

Docker

Kubernetes

GitLab

Jupyter

VMware

Proxmox

Nutanix

NFS

Job description

Career Opportunities with Amatriot Group, LLC

A great place to work.

Share with friends or Subscribe!

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Location: Chantilly, VA
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*:$100,000 - $146,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Network Engineer (Senior) leads the design, implementation, modernization, and optimization of resilient, secure network infrastructure supporting mission-critical operations. This role provides strategic and technical leadership in network architecture, zero-trust implementation, performance optimization, and secure communications across complex, multi-enclave environments.

The Network Engineer (Senior) also supports enterprise networking, virtualization, storage, monitoring, identity and access management, and related infrastructure technologies while partnering with security, architecture, and operations teams to maintain reliable and secure network services.

Key Responsibilities

Network Architecture and Modernization

• Design and implement enterprise network architectures supporting secure, mission-critical operations.
• Lead zero-trust network design initiatives and cross-enclave interoperability solutions.
• Drive network modernization aligned with enterprise strategy and zero-trust principles.
• Provide technical leadership for network infrastructure planning and implementation.

Network Performance and Resilience

• Optimize network performance, reliability, and security across complex, multi-enclave environments.
• Partner with security, architecture, and operations teams to maintain resilient network systems.
• Troubleshoot complex network performance and connectivity issues.
• Support reliable communications across secure and highly regulated environments.

Security Architecture and Governance

• Establish and enforce network security architecture standards and governance processes.
• Ensure secure communications and connectivity across classified and highly regulated environments.
• Support vulnerability monitoring, alerting, and security assessment activities.
• Apply secure access-control and identity-management practices to network infrastructure.
• Support Cisco switching, routing, firewalling, and site-to-site connectivity, including IPsec, DMVPN, and SD-WAN.
• Support Arista switching technologies.
• Configure and troubleshoot tunneling and VPN technologies, including GRE, IPsec, SSH, SSL, OpenVPN, WireGuard, and specialized multi-tiered applications.
• Support virtual distributed switching using VMware, Proxmox, and Nutanix.
• Support client-server VPNs, site-to-site VPNs, and ad hoc vendor or equipment integrations.

Virtualization and Hyperconverged Infrastructure

• Support VMware/Broadcom technologies including ESXi/vSphere, vCenter, vSAN, VxRail, cluster management, and licensing.
• Configure and manage Proxmox hosts and clusters, networking, and Ceph environments.
• Configure and manage Nutanix hosts and clusters using Prism Central.
• Support Nutanix NDFS configuration and management.

Storage, Monitoring, and Platform Support

• Support storage technologies including QNAP, Synology, TrueNAS, and NetApp.
• Support file transport protocols including Samba, SSH, SFTP, and NFS.
• Support network-based and host-based monitoring and collection.
• Configure internal and external alerting, including SMTP-based notifications.
• Support active vulnerability scanning using technologies such as Nessus.
• Support Splunk for SIEM and monitoring functions.

System Administration and Identity Management

• Support Linux operating systems, including Rocky Linux, Red Hat, Amazon Linux, and Ubuntu.
• Support Windows and macOS environments.
• Support identity and access management technologies including IPA/FreeIPA, LDAP/OpenLDAP, Keycloak, and Linux SSSD host-based access control.
• Support applications and platforms including Splunk, Nginx, Confluence, Jira, Docker, Kubernetes, GitLab, and Jupyter.

Qualifications

Education

Experience

• Minimum 8 years of relevant experience. [Required]
• Extensive experience designing and supporting enterprise network environments. [Required]
• Experience implementing zero-trust architectures and secure communications solutions. [Required]
• Experience supporting mission-critical, highly secure, or regulated environments. [Required]

Skills

• Strong expertise in routing, switching, firewalls, VPNs, network security, and access-control technologies. [Required]
• Advanced troubleshooting and network performance analysis skills. [Required]
• Strong leadership, communication, and technical documentation skills. [Required]

Preferred Qualifications

• Master’s degree in Information Technology, Network Engineering, Cybersecurity, or a related field.
• Expertise with multi-enclave or cross-domain network architectures.
• Experience with cloud networking, software-defined networking, and hybrid-cloud environments.
• Knowledge of security accreditation processes and compliance frameworks.
• Relevant certifications such as CCNP, CCIE, CISSP, JNCIP, JNCIE, AWS Advanced Networking, or equivalent.