Senior Network Engineer

Sarela Technology Solutions; Fort Belvoir (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Tuition assistance

Vision insurance

Job summary

Sarela Technology Solutions is seeking a senior technical lead to ensure deployment, security, and operational availability of enterprise app delivery and network security infrastructure. You will administer F5 BIG-IP platforms (LTM/APM), configure virtual servers, iRules, and health monitors to support mission-critical apps.

You will also manage secure remote access, CAC/PKI MFA, SAML/OAuth federation, and Zero Trust policies, while maintaining Cisco/DSP routers, VPNs, and Palo Alto firewalls

Qualifications

• Active DoD security clearance at Secret or TS/SCI as required.
• Meet DoD 8570/8140 certification requirements with IAT Level II.
• Five+ years hands-on with F5 BIG-IP (LTM/APM) and related appliances.
• Five+ years routing/switching with Cisco IOS-XE/NX-OS and Palo Alto firewalls.
• Experience configuring enterprise routing, switching, load balancing, remote access, and firewalls.
• Experience applying STIGs and remediating ACAS findings in a DoD setting.

Responsibilities

• Lead deployment, security, and operations for enterprise app delivery and security appliances.
• Manage F5 BIG-IP platforms (LTM/APM), virtual servers, iRules, and health monitors.
• Configure secure remote access, CAC/PKI MFA, SAML/OAuth, and Zero Trust via F5 APM.
• Maintain global routing, load balancing, and SD-WAN migrations with minimal downtime.
• Apply STIGs, remediate ACAS findings, and support change control and incident resolution.

Skills

F5 BIG-IP/LTM/APM

Cisco IOS-XE/NX-OS routing

Palo Alto firewalls

DoD security clearance

ACAS/STIG remediation

Tools

F5 BIG-IP appliances (VIPRION/rSeries)

GTM/DNS, ASM/AWAF

PAN Panorama

ACAS & STIG tooling

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Tuition assistance
• Vision insurance

Serve as the senior technical lead for the deployment, security, and operational availability of DTRA’s enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure. Administer F5 BIG-IP platforms, including Local Traffic Manager (LTM), Global Traffic Manager/DNS (GTM/DNS), Access Policy Manager (APM), and Application Security Manager/Advanced Web Application Firewall (ASM/AWAF). Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors to support highly available mission applications. Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM. Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers. Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats. Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation. Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime. Configure, administer, and troubleshoot Palo Alto Networks Next-Generation Firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking. Apply DISA Security Technical Implementation Guides (STIGs) and remediate vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets. Prepare change control documentation, maintain network topology diagrams, and provide Tier 3/4 incident escalation support.

Required Qualifications:

• Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI).
• Meet the applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement.
• At least five years of hands-on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM.
• At least five years of hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks Next-Generation Firewalls.
• Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies.
• Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment.

Desired Qualifications:

• IAT Level III certification, such as CISSP or CASP+, consistent with the position’s applicable qualification requirements.
• F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM.
• Hands-on experience migrating F5 environments to rSeries or VELOS platforms.
• Cisco Certified Network Professional (CCNP) Enterprise certification.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
• Proven experience leading live SD-WAN migrations and cutovers with minimal operational disruption.
• Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.