Network Engineer (SMA 1)

E Logic; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

E-Logic, Inc. is seeking a highly skilled Network Engineer to support the Congressional Budget Office under the SENTRY BPA.

You will design, implement, and maintain a secure Cisco-based network, managing routers, switches, firewalls, VPNs, and wireless services while addressing IR remediation requirements. You will work with federal staff to ensure a strong security posture and compliance with federal cybersecurity policies, including NIST SP 800-53 and 800-207.

Qualifications

• Must hold a current CCNP certification (or equivalent Cisco certification) maintained for 5+ years.
• Eligible to obtain and maintain a Public Trust Tier 2 clearance.
• Minimum of 5 years of enterprise network engineering experience.
• Hands-on experience with Cisco IOS/NX-OS and Layer 2/3 networking, VLANs/STP/trunking/network segmentation.
• Strong knowledge of NIST SP 800-53 and Zero Trust Architecture (NIST SP 800-207).
• Automation experience with Python, Ansible, or Terraform is desired.

Responsibilities

• Configure and manage routers, switches, firewalls, VPNs, and wireless infrastructure across core, distribution, access, and edge layers.
• Implement and troubleshoot routing protocols (BGP, OSPF, EIGRP) and network segmentation.
• Maintain DNS, DHCP, IPAM, and other network services.
• Support Zero Trust Architecture and security controls per NIST standards.
• Integrate network logging with SIEM (e.g., Microsoft Sentinel) and monitor performance.
• Perform vulnerability remediation and device patching; support incident response.

Skills

CCNP certification

Public Trust eligibility

5+ years enterprise networking

Python/Ansible/Terraform

Education

CCNP or equivalent Cisco certification

Tools

Cisco IOS/NX-OS

Job description

Job Description:

We are looking for a highly skilled and proactive Network Engineer to join our team supporting the Congressional Budget Office (CBO) under the SENTRY Blanket Purchase Agreement (BPA). As a Network Engineer, you will support the design, implementation, and maintenance of CBO's secure Cisco-based network infrastructure. You will be responsible for configuring, managing, and troubleshooting network devices to strengthen the security, reliability, and resilience of the network infrastructure while addressing identified Incident Response (IR) remediation requirements. You will work directly with federal staff to ensure network systems maintain a strong security posture and achieve compliance with federal cybersecurity policies.

Key Responsibilities:

• Network Operations:Configure and manage routers, switches, firewalls, VPNs, and wireless infrastructure; support core, distribution, access, and edge layers.
• Routing & Switching:Implement and troubleshoot routing protocols (BGP, OSPF, EIGRP); configure VLANs, Spanning Tree Protocol (STP), trunking, and network segmentation.
• Network Services:Maintain DNS, DHCP, NTP, IP Address Management (IPAM), and network services.
• Security Implementation:Support Zero Trust Architecture (ZTA) and network segmentation initiatives; implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207.
• Monitoring & SIEM:Integrate network logging with SIEM platforms (e.g., Microsoft Sentinel); assist in monitoring network performance and availability.
• Vulnerability Management:Perform vulnerability remediation and network hardening; support network device patching and firmware updates.
• Incident Response:Support incident response activities by providing network-level analysis, containment actions (e.g., segmentation, blocking malicious traffic), and forensic data collection.

Required Qualifications:

• Certification:Must hold a current CCNP certification (or equivalent Cisco certification) that has been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered.
• Clearance:Must be eligible to obtain and maintain a Public Trust Tier 2 clearance (background check conducted through U.S. Capitol Police).
• Experience:Minimum of 5 years of experience in enterprise network engineering.
• Technical Proficiency:Demonstrated hands-on experience with:
• Cisco IOS/NX-OS
• Layer 2 and Layer 3 networking technologies
• VLANs, STP, trunking, and network segmentation
• DNS, DHCP, and IPAM
• Firewalls and VPN technologies
• Cybersecurity Knowledge:Strong knowledge of NIST SP 800-53 and Zero Trust Architecture (NIST SP 800-207).
• Automation:Experience with network automation using Python, Ansible, or Terraform is desired.

Desired Experience:

• Experience with Cisco Identity Services Engine (ISE), Azure Networking, or network monitoring tools (SolarWinds, ThousandEyes).
• Federal or legislative branch experience.
• Experience implementing 802.1X port-based network access control.

Clearance Requirement:

Must be eligible for a Public Trust Tier 2

Citizenship:

U.S. Citizenship or Permanent Residence Status is required

Job Type:

Full-time

Equal Opportunity Employer Statement

E-Logic, Inc. is an equal opportunity employer and is committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.