Senior Network Engineer

Career Listings; Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Tuition assistance

Vision insurance

Job summary

Career Listings in Virginia seeks an experienced DoD network security engineer to lead deployment, security, and operations of core enterprise infrastructure. You will manage F5 BIG-IP platforms, including LTM and APM, and ensure high availability across global data centers.

The role requires hands-on firewall and routing expertise with Cisco and Palo Alto devices, DoD STIGs, and ACAS remediation, plus leading SD-WAN migration efforts with minimal downtime.

Qualifications

• Active DoD security clearance at the level required for the billet (Secret or TS/SCI).
• DoD 8570/IAT Level II certification requirement.
• 5+ years hands-on experience administering F5 BIG-IP platforms with LTM and APM.
• 5+ years hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto NGFW.
• Experience configuring enterprise routing, switching, load balancing, secure remote access, and firewall technologies.
• Experience applying DISA STIGs, remediating ACAS findings, and supporting change management in a DoD environment.

Responsibilities

• Serve as the senior technical lead for deployment, security, and operational availability of enterprise delivery controllers and core network infrastructure.
• Administer F5 BIG-IP platforms including LTM, GTM/DNS, APM, and ASM/AWAF.

Skills

Network security

Troubleshooting

Incident response

DoD compliance

Technical leadership

Education

IAT Level II certification

IAT Level III certification

Tools

F5 BIG-IP

Cisco IOS-XE/NX-OS

Palo Alto NGFW

SD-WAN platforms

ACAS/STIG tooling

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Tuition assistance
• Vision insurance

Responsibilities:

• Serve as the senior technical lead for the deployment, security, and operational availability of DTRA’s enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure.
• Administer F5 BIG-IP platforms, including Local Traffic Manager (LTM), Global Traffic Manager/DNS (GTM/DNS), Access Policy Manager (APM), and Application Security Manager/Advanced Web Application Firewall (ASM/AWAF).
• Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors to support highly available mission applications.
• Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM.
• Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers.
• Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats.
• Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation.
• Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime.
• Configure, administer, and troubleshoot Palo Alto Networks Next-Generation Firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking.
• Apply DISA Security Technical Implementation Guides (STIGs) and remediated vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets.
• Prepare change control documentation, maintain network topology diagrams, and provide Tier 3/4 incident escalation support.

Required Qualifications:

• Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI).
• Meet the applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement.
• At least five years of hands‑on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM.
• At least five years of hands‑on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks Next‑Generation Firewalls.
• Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies.
• Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment.

Desired Qualifications:

• IAT Level III certification, such as CISSP or CASP+, consistent with the position’s applicable qualification requirements.
• F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM.
• Hands‑on experience migrating F5 environments to rSeries or VELOS platforms.
• Cisco Certified Network Professional (CCNP) Enterprise certification.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
• Proven experience leading live SD‑WAN migrations and cutovers with minimal operational disruption.
• Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.