Network Engineer SME

Trace3; Linthicum (MD); Hybrid; USD 223,000 - 243,000; Part time

Benefits offered by this job

Comprehensive medical, dental and vis­

401(k) Plan with match and savings

Competitive compensation

Training and development programs

Office snacks and beverages

Collaborative culture

Generous PTO

Job summary

Trace3 is seeking a Principal Network Subject Matter Expert to lead enterprise network modernization on a high-priority federal program. You’ll set standards, approve designs, and mentor engineering teams while working onsite at secure customer locations.

This six-month W2 contract has strong potential for extension or conversion to full-time and requires eligibility for a security clearance. You will collaborate across network, security, systems, storage, and DevOps teams to deliver resilient,

Qualifications

• 10+ years designing, modernizing, and supporting complex enterprise networks.
• Experience as network architect, technical authority, or senior escalation resource in mission-critical environments.
• Expertise with Cisco enterprise routing, switching, firewall, VPN, and data-center technologies.
• Advanced knowledge of BGP, OSPF, VLANs, VRFs, QoS, multicast, segmentation, high availability.
• Experience developing and approving network architectures, BOMs, migration strategies, implementation plans, test plans, and operational docs.
• Strong knowledge of network security, including firewall policy, micro-segmentation, secure remote access, network access control, and Zero Trust.
• Expert-level troubleshooting across routing, performance, availability, DNS, DHCP, NTP, IP address management, authentication, and application connectivity.
• Experience with monitoring/observability technologies: telemetry, SNMP, syslog, NetFlow/IPFIX, packet capture.
• Proven ability to assess technical risk, compare design trade-offs, and communicate with technical and nontechnical stakeholders.
• Ability to lead cross-functional execution and work onsite in secure federal/industrial environments.
• Initial 6‑month contract with potential extension/FT conversion; on-site work; security clearance eligible.
• Education: Bachelor’s preferred but not required.

Responsibilities

• Serve as the onsite network technical authority and trusted advisor to customer leadership.
• Define network architecture principles, standards, and roadmaps for mission-critical environments.
• Assess architecture, performance, resiliency, security across enterprise and data-center sites.
• Develop and approve target-state architectures, BOMs, migration strategies, and test plans.
• Lead technical discovery, architecture reviews and risk assessments with recommendations.
• Ensure routing, switching, segmentation, security, high availability, remote access compliance.
• Serve as final escalation point for incidents and root-cause analysis.
• Establish config, documentation, monitoring, and operational standards for performance.
• Communicate decisions, risks, and trade-offs to stakeholders.
• Coordinate execution across network, security, systems, storage, DevOps and program teams.
• Mentor engineers and strengthen network engineering practices.
• Support onsite assessments, migrations, incidents, and post-implementation stabilization.

Skills

Cisco routing & switching

Network security & Zero Trust

BGP & OSPF

Network architecture & migration

Troubleshooting & RCA

Mentoring engineers

Python & Ansible

Education

Bachelor's Degree in a related field

Tools

VMware

Kubernetes

OpenShift

Python

Ansible

Job description

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.

Ready to discover the possibilities that live in technology?

Come Join Us!

Street-Smart-Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice -The “Stuff” it takes to be a Needle Mover

We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentallymapping outevery checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork -Humble, Hungry and Smart

*This position will be a W2 Contract for 6 months potential to be extended or converted FTE - Eligibility to obtain Government clearance

JOB SUMMARY:

The Principal Network Subject Matter Expert (SME) will serve as the technical authority for enterprise network architecture, modernization, resiliency, security, and performance on a high-priority federal infrastructure program. The SME will set technical direction, establish standards, and advise customer and program leadership across mission-critical environments.

The role combines strategic leadership with hands-on expertise to approve designs, develop target-state architectures and migration plans, resolve complex issues, and serve as the final technical escalation point. The SME will mentor engineering teams, coordinate cross-functional execution, and work primarily onsite at secure customer locations.

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

• Serve as the onsite network technical authority and trusted advisor to customer and program leadership.
• Define network architecture principles, engineering standards, reference designs, and technology roadmaps for mission-critical environments.
• Assess network architecture, performance, capacity, resiliency, security, dependencies, and failure domains across enterprise, data-center, HPC, manufacturing, test, and remote-site environments.
• Develop and approve target-state architectures, bills of material, migration strategies, implementation plans, test plans, and operational-readiness criteria.
• Lead technical discovery, architecture reviews, and risk assessments; evaluate design alternatives and provide authoritative recommendations.
• Ensure network solutions meet requirements for routing, switching, segmentation, security, high availability, remote access, inter-site connectivity, observability, and disaster recovery.
• Serve as the final technical escalation point for complex incidents and performance issues, lead root-cause analysis, and drive corrective actions.
• Establish configuration, documentation, monitoring, and operational standards that improve consistency, supportability, and service performance.
• Communicate technical decisions, risks, dependencies, and trade-offs to customer stakeholders, program leadership, project managers, and engineering teams.
• Coordinate technical execution across network, security, systems, storage, facilities, DevOps, application, and program teams.
• Mentor engineers, provide technical oversight, and strengthen network engineering practices across the program.
• Support onsite assessments, maintenance windows, migrations, incident response, and post-implementation stabilization as required.

REQUIRED SKILLS AND EXPERIENCE:

The successful candidate will demonstrate deep network expertise, sound architectural judgment, and the ability to make technical decisions across customer, government, contractor, and engineering organizations.

• 10+ years of progressively responsible experience designing, modernizing, and supporting complex enterprise networks.
• Demonstrated experience serving as a network architect, technical authority, or senior escalation resource in mission-critical environments.
• Expertise with Cisco enterprise routing, switching, firewall, VPN, and data-center technologies.
• Advanced knowledge of BGP, OSPF, VLANs, VRFs, QoS, multicast, segmentation, high availability, and resilient network design.
• Experience developing and approving network architectures, standards, bills of material, migration strategies, implementation plans, test plans, and operational documentation.
• Strong knowledge of network security, including firewall policy, micro-segmentation, secure remote access, network access control, and Zero Trust principles.
• Expert-level troubleshooting and root-cause analysis across routing, performance, availability, DNS, DHCP, NTP, IP address management, authentication, and application connectivity.
• Experience with monitoring and observability technologies, including telemetry, SNMP, syslog, NetFlow/IPFIX, packet capture, alerting, and performance baselining.
• Proven ability to assess technical risk, evaluate design trade-offs, and communicate authoritative recommendations to technical and nontechnical stakeholders.
• Ability to lead cross-functional technical execution, mentor senior engineers, and work independently onsite in secure, regulated, federal, defense, manufacturing, or comparable environments.
• Initial 6‑month contract with strong potential for extension and possible conversion to a long-term full-time role.
• No active clearance required at start; however, candidates must be eligible to obtain and maintain a security clearance.
• Hybrid environment with on-site requirements still being finalized.
• Work may be performed at multiple Baltimore-area customer locations, and candidates should be flexible regarding worksite assignment and on-site frequency.

PREFERRED SKILLS AND EXPERIENCE:

• Knowledge of EVPN/VXLAN, software-defined networking, data-center fabrics, and high-performance or low-latency networks.
• Experience architecting network integration for VMware, Kubernetes, OpenShift, Tanzu, AWS, and hybrid-cloud platforms.
• Network automation experience using Python, Ansible, APIs, infrastructure as code, or CI/CD practices.
• Experience supporting operational technology, manufacturing, specialized test equipment, legacy platforms, air-gapped environments, or systems with limited maintenance windows.
• Knowledge of NIST 800-171, NIST 800-53, CMMC, vulnerability management, SIEM/EDR integration, and secure software-import processes.
• Familiarity with TDM, serial circuits, and specialized communications technologies.

YEARS OF EXPERIENCE: 10+ years of experience

EDUCATION:Bachelor’s Degree in a related field of study preferred but not required

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

$223,000 - $243,000 USD

The Perks

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work-life balance and generous paid time off

Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, foster collaboration, boosts teammate satisfaction, and build a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email [e-mail].

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Trace3’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.