Network Engineer, Senior (BG26100956PL)

Gtsc; Washington (District of Columbia); On-site; USD 145,000 - 165,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid vacation and holidays

Flexible Spending Account

401(k) with employer match

Life insurance

Disability insurance

Tuition assistance

Job summary

The Bowen Group, a GTSC company, seeks a Network Engineer to design, build, maintain, and sustain classified network infrastructure supporting enterprise IT operations across three geographically dispersed government sites, including two SCIF facilities serving TS/SCI users. Location is Washington, DC metro area with travel to program locations; 25-50% travel.

Requires 5+ years of experience, a related Bachelor's degree, and certifications such as CCNA/CCNP/Security+.

Qualifications

• 5+ years of network engineering experience, including in classified environments.
• Bachelor's degree in a related field or equivalent experience.
• Working knowledge of routing, switching, and network security fundamentals.
• Relevant certification (e.g., CCNA, CCNP, Security+).
• Familiarity with ICD 705 physical security standards for SCIF design and accreditation.
• Familiarity with the RMF per NIST SP 800-37 and NIST SP 800-53 for system security authorization.

Responsibilities

• Design, implement, configure, test, maintain, and sustain enterprise network infrastructure and services across all sites.
• Develop logical and physical network designs based on performance, availability, security, and operational requirements.
• Engineer resilient connectivity across sites, datacenters, cloud, wide-area networks, and other distributed environments.
• Apply sound principles for addressing segmentation, routing, switching, traffic management, and access control.
• Monitor network health, capacity, latency, availability, and utilization.
• Troubleshoot complex network issues using structured analysis, packet-level inspection, telemetry, logs, and performance data.
• Establish redundancy, failover, fault isolation, and recovery mechanisms.
• Integrate network security controls consistent with zero-trust and defense-in-depth principles.
• Develop repeatable configurations, validation procedures, automation, and infrastructure-as-code practices.
• Maintain accurate diagrams, configurations, interface definitions, operating procedures, and change records.
• Participate in change management, incident response, root-cause analysis, and corrective-action planning.
• Collaborate with systems, network, cybersecurity, and operations teams.
• Evaluate technologies based on standards compliance, interoperability, lifecycle cost, supportability, and mission suitability.
• Design and implement network automation that standardizes configuration, testing, deployment, monitoring, and compliance while reducing human error and accelerating the delivery of reliable network services.
• Support design and integration of VTC and conference room AV capability across all program sites, including classified and unclassified variants.
• Support NOC/SOC functions, including monitoring tools, coverage models, and 24x7 support where required.

Skills

Network engineering

Routing & switching

Network security fundamentals

RMF/NIST familiarity

SCIF/TS-SCI eligibility

Cross-functional teamwork

Education

Bachelor's degree or equivalent experience

CCNA

CCNP

Security+

Job description

The Bowen Group, a GTSC company, seeks a skilled Network Engineer to design, build, maintain, and sustain classified network infrastructure supporting enterprise IT operations across three geographically dispersed government sites, including two SCIF facilities serving TS/SCI users.

Location:

Washington, DC metro area, with travel to program locations.

Security Clearance

Current Top Secret with SCI-eligibility and Special Access Programs (SAP) eligibility.

Travel:

25-50% travel to support activities across multiple program locations.

Certifications

CCNA, CCNP, Security+

Salary Range

$145,000-165,000.

Mission

This individual will work with cross-functional teams to ensure reliable, secure connectivity across multiple locations.

Qualifications

• 5+ years of network engineering experience, including in classified environments.

• Bachelor's degree in a related field or equivalent experience.

• Working knowledge of routing, switching, and network security fundamentals.

• Relevant certification (e.g., CCNA, CCNP, Security+).

• Familiarity with ICD 705 physical security standards for SCIF design and accreditation.

• Familiarity with the Risk Management Framework (RMF) per NIST SP 800-37 and NIST SP 800-53 for system security authorization.

Nice to Have:

• Experience supporting cross-domain or multi-level security network solutions.

• Experience deploying networks in newly constructed or renovated facilities.

• Demonstrated experience leading or supporting large, geographically dispersed teams.

• Experience supporting Special Access Program (SAP) facilities, systems, or environments.

Primary duties include:

• Design, implement, configure, test, maintain, and sustain enterprise network infrastructure and services across all sites.

• Develop logical and physical network designs based on performance, availability, security, and operational requirements.

• Engineer resilient connectivity across sites, datacenters, cloud, wide-area networks, and other distributed environments.

• Apply sound principles for addressing segmentation, routing, switching, traffic management, and access control.

• Monitor network health, capacity, latency, availability, and utilization.

• Troubleshoot complex network issues using structured analysis, packet-level inspection, telemetry, logs, and performance data.

• Establish redundancy, failover, fault isolation, and recovery mechanisms.

• Integrate network security controls consistent with zero-trust and defense-in-depth principles.

• Develop repeatable configurations, validation procedures, automation, and infrastructure-as-code practices.

• Maintain accurate diagrams, configurations, interface definitions, operating procedures, and change records.

• Participate in change management, incident response, root-cause analysis, and corrective-action planning.

• Collaborate with systems, network, cybersecurity, and operations teams.

• Evaluate technologies based on standards compliance, interoperability, lifecycle cost, supportability, and mission suitability.

• Design and implement network automation that standardizes configuration, testing, deployment, monitoring, and compliance while reducing human error and accelerating the delivery of reliable network services.

• Support design and integration of video teleconferencing (VTC) and conference room AV capability across all program sites, including classified and unclassified variants.

• Support network and security operations center (NOC/SOC) functions, including monitoring tools, coverage models, and 24x7 support where required.

FOUNDATIONAL SKILLS

• Network models, packet flow, encapsulation, and protocol behavior.

• IPv4 and IPv6 addressing, subnetting, name resolution, and address-management principles.

• Layer 2 and Layer 3 networking, routing, switching, and segmentation.

• Transport protocols, application traffic patterns, and quality-of-service principles.

• Network security, encryption, access control, secure remote access, and traffic inspection.

• Wide-area, datacenter, cloud, and software-defined networking concepts.

• High availability, redundancy, load distribution, and failure-domain design.

• Network monitoring, telemetry, logging, packet analysis, and performance engineering.

• Scripting, automation, version control, and configuration-management fundamentals.

• Structured troubleshooting and root-cause analysis.

TS/SCI clearance and SAP eligibility are required for this position. Only applicants with a current security clearance will be considered. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Special Access Program (SAP) Eligibility: Candidates must successfully complete security screening related to foreign contacts, foreign interests, foreign travel, personal conduct, and financial responsibility as part of the SAP access determination process.

Benefits

We offer a comprehensive benefits package for Full-time Employees to include the following:

• Health, dental, vision insurance.

• Generous paid vacation and holiday leave.

• Flexible Spending Account (medical and dependent).

• 401(k) with employer match.

• Life insurance.

• Short-term and long-term disability.

• Tuition assistance and professional development opportunities.

The Bowen Group is proud to be an equal opportunity employer, committed to recruiting, hiring, and promoting qualified people of all backgrounds, regardless of sex; race; color; creed; national origin; religion; age; marital status; pregnancy; physical, mental or sensory disability; sexual orientation; gender identity or any other basis protected by federal, state or local law. Learn more about your EEO rights as an applicant.

The Bowen Group is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities. If you have a disability and require assistance with our online application process, please tell us how we can help by contacting us at [e-mail]

Note: This accessibility is intended for individuals requiring accommodations and should not be used to check on the status of your application. Inquiries not specific to requesting an accommodation will be discarded.

The Bowen Group participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.