Network Engineer SME - TS/SCI w/Polygraph

General Dynamics - IT

Herndon (VA)

On-site

USD 135,000 - 175,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

401K match

Comprehensive health packages

Internal mobility team

Career growth opportunities

Cutting-edge technology you can learn

Paid vacation and holidays

Job summary

General Dynamics - IT is seeking a Network Engineer (SME) to design technical solutions for complex problems and provide technical oversight from requirements interpretation to implementation. The role focuses on security best practices, capacity planning, and infrastructure tuning, with independence and flexibility to support IT Operations on demand.

Responsibilities include security posture management, documentation, and cross-team collaboration to deliver robust LAN/WAN solutions.

Qualifications

Active TS/SCI with Polygraph required.
Bachelor's or equivalent in Engineering or related field.
19 years job-related experience.
15+ years of related Network Engineering experience.
12+ years configuring Cisco ASA/NGFW.
10+ years configuring LAN/WAN devices.
Thorough understanding of routing: EIGRP, OSPF, BGP, IP MPLS.
Experience deploying Cisco, Palo Alto, or Juniper firewall platforms.
Experience enabling voice/video across NGFW.
Mentor junior network engineers.

Responsibilities

Define, maintain, and upgrade the overall security posture of the networks.
Perform security audits and implement improvements to security posture.
Manage and allocate network installation and engineering tasks; configure network equipment.
Create build-to and as-built documentation and test plans for installs.
Engage in system planning beyond the network for applications and systems.
Provide expert analysis of voice, video, and data networks and OS/protocol upgrades.
Plan network layouts and configure systems for user environments.
Provide technical support to users (Tier I–III).
Mentor junior engineers and drive project excellence.

Skills

Security clearance

LAN/WAN design

Firewall management

Cisco/Juniper

Network monitoring

Education

Bachelor’s degree in Engineering or related field

Tools

Cisco ASA/NGFW

Juniper firewalls

VPN technologies

Job description

The Network Engineer (SME) is responsible for designing technical solutions for complex problems. The candidate will provide technical oversight of a project solution, including requirement interpretation and allocation of requirements to technical components. The candidate will define processes to support the implementation of requirements. The candidate will be responsible for ensuring that the technical solutions leverage industry best practices, designing security and excellence while minimizing the total cost of ownership. Candidate should be able to define internal and external customer IT infrastructure architecture needs and then design solutions to meet those needs to include: capacity planning, systems configuration and tuning, monitoring backups, and installations of hardware and software. Candidates will be required to work independently with little supervision and should be flexible to work and support IT Operations needs as requested.

HOW A NETWORK ENGINEER WILL MAKE AN IMPACT:

Define, maintain, and upgrade the overall security posture of the networks.
Will perform security audits of events, overall health and implement changes to improve the overall programs security posture.
Manage and allocate network installation and engineering tasks, configure and maintain communications systems, familiarity with implementation of LAN and WAN equipment including firewalls, servers, workstations, routers, switches, hubs, storage devices, A/V equipment and equipment racks.
Ability to write and edit “build-to” and “as-built” documentation, as well as implementation and test plans for physical and logical installs of IT equipment.
Able to engage in technical system planning beyond the network, to include applications and systems that utilize the network being delivered.
Provides expert level analysis of voice, video, and/or data communications networks, including planning, designing, evaluating, selecting, and upgrading operating systems and protocol suites.
Ability to plan network layouts and configure systems to user environments.
May provide technical support and troubleshooting to users. (Tier I, II, and III).
May serve as a technical team and/or task leader, must be independent and self-motivated.

WHAT YOU’LL NEED TO SUCCEED:

Required Qualifications:

The position requires an active TS/SCI with Polygraph security clearance.
Bachelor’s or Technology degree in Engineering or a related specialized area/field, OR equivalent.
19 years job-related experience.
15+ years of related Network Engineering experience.
12 +years of experience configuring/maintaining Cisco ASA/Next Generation Firewall.
10 + years of experience configuring, designing, maintaining, and troubleshooting LAN/WAN devices.
Thorough understanding of network routing concepts (EIGRP, OSPF, BGP, IP MPLS).
Experience design, engineering, and deploying controlled interfaces (10 + years).
Expertise/experience (more than 10) deploying Cisco, Palo Alto, or Juniper firewall.
Experience allowing voice, video traffic across port-based firewall and NGFW.
Experience in engineering and deploying multi firewall solutions.
Experience design, engineering, and deploying firewall vendor transitioning plans.
Experience design, engineering, and deploying firewall in a multicast network environment.
Experience IPSec site-to-site VPN utilizing PKI (CA).
Experiences Remote access VPN.
Basic understanding of QoS concepts.
Experience with network monitoring technologies.
Ability to take ambiguous requirements or problems and convert them into technical solutions.
Ability to partner with systems administrators, storage administrators, and application developers to solve complex problems.
Complex problem management research and issue resolution.
Ability to mentor junior network engineers.
Excellent organizational, coordination, interpersonal and team building skills.
Proven problem-solving skills in complex environments.

Location:

At Customer Site – Herndon area

DESIRED QUALIFICATIONS:

Experience configuring, designing, and troubleshooting QoS in LAN or WAN devices.
Juniper, Palo Alto, or Cisco Next Generation Firewalls Certifications and hands on experience.
Experience design, engineering, and deploying Muli-Factor Authentication solution.
Experience design, engineering, and deploying Zero-Trust solutions.

GDIT IS YOUR PLACE: