Senior Network Engineer

Vamonos IT; Northern (KY); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company contribution

Paid time off and federal holidays

Professional development, certs, and培训

Job summary

Vamonos IT is seeking a Senior Network Engineer to design, deploy, secure, and operate highly available network infrastructure for government and commercial customers. This hands-on role will own routing, security, and automation, mentoring junior engineers while serving as a technical escalation point.

The ideal candidate has deep networking knowledge, strong automation skills, and effective communication with technical teams and customers.

Qualifications

• 6+ years of professional network engineering in production environments.
• Expert TCP/IP knowledge with BGP plus an IGP (OSPF/IS-IS/EIGRP).
• Strong routing and switching fundamentals (VLANs, trunking, STP, LACP, QoS).
• Experience with carrier-grade platforms (Cisco, Juniper, Arista, MikroTik).
• Practical experience with firewalls, VPNs, tunneling, and NAC.
• DNS/DHCP/NTP/TLS/PKI and load balancing know-how.
• Strong IPv4/IPv6 addressing, subnetting, and dual-stack.
• Linux administration and CLI proficiency.
• Troubleshooting with tcpdump/Wireshark; packet captures and flow data.
• Scripting/automation in Python/Bash/Go; Git and config-as-code.
• Ability to work remotely, prioritize, and communicate clearly in writing.
• Legally authorized to work in the United States without sponsorship.
• Able to pass a background investigation and participate in on-call rotations.

Responsibilities

• Design, deploy, and maintain enterprise networks across on-prem, colocation, and cloud.
• Configure and operate BGP/IGP routing and traffic engineering.
• Manage upstream transit, peering, and routing relationships.
• Plan IPv4/IPv6 addressing and dual-stack deployments; ARIN/RIR resources.
• Implement network security with firewalls, VPNs, ACLs, and DDoS mitigation.
• Monitor, alert, and provide network observability; incident response.
• Automate configuration and deployment using Python, Bash, Go, Ansible, Terraform.
• Lead troubleshooting for complex network issues and root-cause analysis.
• Maintain diagrams, IP/assets, runbooks, and change docs.
• Support audits and enforce security baselines; mentor junior engineers.

Skills

TCP/IP knowledge

BGP & IGP routing

Network security fundamentals

Troubleshooting & packet analysis

Scripting/automation (Python, Bash, Go

Documentation & incident response

Remote work communication

Education

Bachelor's degree in CS/IT/Networking

Tools

Cisco IOS/NX-OS

Juniper Junos

Arista EOS

MikroTik RouterOS

tcpdump/Wireshark

Git & config-as-code

Ansible/T Terraform

Job description

Description

Vamonos IT is seeking an experienced Senior Network Engineer to design, deploy, secure, and operate highly available network infrastructure for government and commercial customers. This hands-on senior individual contributor will own routing and switching architecture, network security, carrier/peering relationships, automation, monitoring, troubleshooting, and incident response.

The ideal candidate combines deep networking and protocol knowledge with strong automation skills and the ability to communicate effectively with both technical teams and customers.

Key Responsibilities

• Design, implement, and maintain enterprise and service-provider networks across on-premises, colocation, and cloud environments.
• Configure and operate BGP, OSPF, and other dynamic routing protocols, including route policy, redistribution, filtering, and traffic engineering.
• Manage upstream transit, peering, internet exchange, and routing relationships.
• Plan and manage IPv4/IPv6 addressing, subnetting, dual-stack deployments, ARIN/RIR resources, IRR, and RPKI.
• Implement network security through segmentation, firewalls, ACLs, VPNs, tunneling, access controls, and DDoS mitigation.
• Deploy and maintain monitoring, alerting, flow analysis, and network observability systems.
• Automate network configuration, validation, and deployment using Python, Bash, Go, Ansible, Terraform, or similar tools.
• Lead troubleshooting and incident response for complex network issues, including packet-level analysis and root-cause investigations.
• Perform capacity planning, lifecycle management, maintenance windows, and network cutovers with minimal customer impact.
• Maintain network diagrams, IP/asset records, runbooks, configurations, and change documentation.
• Support compliance and audits by providing configuration evidence, remediating findings, and enforcing security baselines.
• Serve as a technical escalation point and mentor junior engineers while working directly with customer technical contacts.

Required Qualifications

• 6+ years of professional network engineering experience in production environments; exceptional senior candidates may qualify through demonstrated technical ownership and portfolio work.
• Expert TCP/IP knowledge and hands-on production experience with BGP plus at least one IGP (OSPF, IS-IS, or EIGRP).
• Strong routing and switching fundamentals, including VLANs, trunking, spanning tree, link aggregation, QoS, MTU, and fragmentation.
• Experience with enterprise or carrier-grade platforms such as Cisco IOS/NX-OS, Juniper Junos, Arista EOS, MikroTik RouterOS, or equivalent.
• Practical experience with firewalls, IPsec/WireGuard/SSL VPNs, tunneling, and network access control.
• Working knowledge of DNS, DHCP, NTP, TLS/PKI, and load balancing.
• Strong IPv4/IPv6 addressing, subnetting, and dual-stack experience.
• Strong Linux administration and command-line skills.
• Proven troubleshooting skills using tcpdump, Wireshark, packet captures, and flow data.
• Scripting/automation experience with Python, Bash, Go, or similar languages.
• Experience with Git and configuration-as-code practices.
• Ability to work independently in a remote environment, manage priorities, and communicate clearly in writing.
• Legally authorized to work in the United States without sponsorship.
• Ability to pass a background investigation.
• Willingness to participate in an on-call rotation and scheduled after-hours maintenance.

Preferred Qualifications

• Federal government or federal contracting experience, particularly DHS, DoD, or civilian agencies.
• Active, prior, or eligible U.S. security clearance.
• Certifications such as CCNP/CCIE, JNCIP/JNCIE, Arista ACE, Network+, or Security+.
• Service-provider/ISP experience, including internet peering, transit, IXP operations, or RIR resource management.
• Experience with RPKI, IRR, BGP origin validation, and route-security practices.
• Cloud networking experience with AWS, Azure, or GCP, including VPC/VNet design, transit gateways, ExpressRoute/Direct Connect, and hybrid connectivity.
• Experience with Ansible, NAPALM, Nornir, Terraform, CI/CD, or other network automation frameworks.
• Experience with NetFlow, sFlow, IPFIX, Prometheus, Grafana, LibreNMS, ELK, or SIEM integration.
• Advanced security experience involving DDoS mitigation, IDS/IPS, threat modeling, deception, or traffic analysis.
• Experience with SD-WAN, MPLS, VXLAN, or overlay networks.
• Familiarity with NIST 800-53, FISMA, FedRAMP, CMMC, or similar compliance frameworks.
• Open-source contributions or a public networking/systems portfolio.
• Experience mentoring engineers or leading small technical teams.

Education

Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field preferred. Equivalent professional experience, military experience, relevant certifications, or demonstrated technical work may substitute for a degree.

Work Environment & Travel

Remote position for candidates authorized to work in the United States. Occasional travel to customer facilities, data centers, or company meetings is required. Participation in an on-call rotation and periodic after-hours maintenance or incident response is expected.

Compensation & Benefits

Vamonos IT offers a competitive benefits package including:

• Medical, dental, and vision insurance
• 401(k) with company contribution
• Paid time off and federal holidays
• Professional development, certification, and training support
• Remote-first work environment

Equal Employment Opportunity

Vamonos IT is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.