Network Engineer Sr – Public Trust

Dunhill Solutions; United States; Remote; USD 100,000 - 117,000; Full time

Job summary

Dunhill Government Solutions is seeking a Senior Network Engineer to support a federal program delivering enterprise identity and directory services. This fully remote role focuses on designing and sustaining a secure, highly available network that handles authentication and directory replication across data centers and cloud environments.

Responsibilities include designing Layer 2/3 architectures, configuring routers/switches/firewalls, and implementing Zero Trust controls.

Qualifications

• Bachelor’s degree in CS/IT or equivalent experience.
• At least 4 years of professional network engineering experience.
• Experience with routing, switching, and network security technologies.

Responsibilities

• Design and implement Layer 2/3 architectures with redundancy and WAN connectivity.
• Configure and troubleshoot routers, switches, firewalls, and ADCs.
• Analyze directory services networking dependencies and performance issues.
• Establish Zero Trust-aligned controls and secure admin access.
• Develop runbooks and change records; mentor junior engineers.
• Plan HA and DR connectivity with failover testing.

Skills

Layer 2/3 concepts

Routing protocols

Network security technologies

Packet analysis & telemetry

Zero Trust security controls

Education

Bachelor’s degree in CS/IT or equivalent experience

Tools

Load balancers and ADCs

CCNP Enterprise / CCNP Security preferred

Job description

Network Engineer Sr — Remote (U.S.)

Dunhill Government Solutions is hiring a Senior Network Engineer to support a newly awarded federal program delivering enterprise identity and directory services. This is a full-time, fully remote role designing and sustaining the secure, highly available network that carries authentication, authorization and directory replication across distributed data centers and cloud environments.

Responsibilities:

• Design and implement resilient Layer 2 and Layer 3 architectures — IP addressing, VLANs, routing domains, dynamic routing protocols, route filtering, redundancy and WAN/data-center connectivity.
• Configure, maintain and troubleshoot enterprise routers, switches, next-generation firewalls, load balancers and application delivery controllers carrying authentication, directory-service and user-access traffic.
• Analyze network dependencies behind directory sites, replication paths, DNS, Kerberos, LDAP/LDAPS and Global Catalog access to isolate latency, packet loss, asymmetric routing, MTU, firewall-policy and name-resolution problems.
• Implement Zero Trust-aligned controls: segmentation, least-privilege access policies, identity-aware access patterns, secure management planes and controlled east-west traffic.
• Develop and maintain firewall rules, security zones, access-control lists, IDS/IPS integrations and logging requirements that protect identity infrastructure without interrupting authorized traffic.
• Establish performance, availability and capacity monitoring on critical paths using telemetry, flow data, packet analysis, SNMP, syslog and alert thresholds, and turn findings into remediation and scaling actions.
• Engineer high-availability and disaster-recovery connectivity through redundant paths, failover design, routing-convergence testing, recovery validation and documented procedures.
• Build repeatable provisioning, configuration validation and compliance checks using infrastructure-as-code, APIs, templates, source control and configuration management tooling.
• Produce diagrams, technical standards, implementation plans, change records and troubleshooting runbooks, and mentor junior engineers on secure design and structured fault isolation.

Requirements:

• U.S. citizenship, and the ability to obtain and maintain a Public Trust (Tier 1 / NACI) background investigation.
• Bachelor’s degree in computer science, information technology or a related field, or equivalent relevant experience.
• At least 4 years of professional network engineering and design experience supporting enterprise-scale, highly available infrastructure.
• Strong hands-on experience designing, configuring and troubleshooting enterprise routing and switching — Layer 2 and Layer 3 concepts, VLANs, routing protocols, route filtering and redundancy.
• Experience with network security technologies: next-generation firewalls, access-control lists, segmentation, intrusion detection and prevention, and secure administrative access.
• Experience troubleshooting complex connectivity and performance issues using packet analysis, telemetry, flow data, SNMP, syslog and monitoring tools.
• Working knowledge of load balancers and application delivery controllers supporting highly available application and identity-service traffic.
• Preferred: Cisco CCNP Enterprise, CCNP Security or a comparable senior networking certification. Not holding one today does not stop you applying.
• Fully remote, day shift. Travel is not required.

Compensation: $100,000 to $117,000 per year, full time, 40 hours per week.

Dunhill Government Solutions has placed cleared and public-trust professionals across the federal government for more than 25 years. AI-Powered. Human-Delivered.