Senior Network Engineer (Hybrid Cloud)

Defense Information Systems Agency; Washington; Hybrid; USD 128,000 - 187,000; Full time

Job summary

Defense Information Systems Agency (DISA) is seeking a Principal Network Engineer (Hybrid Cloud) embedded within the Product Team to architect and guide enterprise transport, cloud connectivity, and next-generation endpoint networking. You will bridge traditional networking with cloud products, translating roadmaps into scalable, high-performance network fabrics.

In this senior role, you will drive NetDevOps adoption, implement IaC, and ensure secure, resilient connectivity across data centers

Qualifications

• Senior-level network architecture experience in large-scale enterprise environments.
• Strong understanding of data center fabrics, EVPN-VXLAN and SD-WAN.
• Experience with cloud connectivity and IaC tooling is required.

Responsibilities

• Translate product roadmaps into scalable transport and cloud connectivity solutions.
• Design secure, high-throughput hybrid-cloud transit systems.
• Lead next-gen endpoint networking including SD-WAN and ZTNA.
• Oversee complex enterprise routing layouts (BGP/OSPF).
• Champion NetDevOps and IaC for network provisioning.
• Embed security controls into network architecture (edge security, NGFW).
• Prototype emerging transport and networking capabilities with product managers.

Skills

Hybrid Cloud

BGP

SD-WAN

Network Security

Infrastructure as Code

Cisco

Systems Integration

Tools

Cisco

Job description

Join the Defense Information Systems Agency (DISA), where we deliver the secure IT and communications capabilities that keep our Nation’s Warfighters and senior leaders connected anytime, anywhere. Within Command, Control, Communications and Computers (C4) Enterprise Directorate (J-6), we empower our Nation’s senior leaders and the warfighter community with assured enterprise services to win in an evolving global landscape.

Position Overview:

Serving as the Principal Network Engineer (Hybrid Cloud) embedded directly within the Product Team, you provide authoritative technical design and strategic direction for enterprise transport systems, cloud-transit connectivity, and next-generation endpoint network capabilities. In this senior technical role, you bridge the gap between traditional networking and modern cloud products, translating capability roadmaps into scalable, high-performance, and resilient network fabrics.

You lead the architecture of complex data center fabrics (EVPN-VXLAN), enterprise routing topologies (BGP, OSPF), Software-Defined WAN (SD-WAN), and high-throughput cloud transit connections (e.g., Azure ExpressRoute). Championing a code-driven NetDevOps approach, you drive the adoption of Infrastructure as Code (IaC) and Zero Trust Network Access (ZTNA), collaborating closely with product managers, platform engineers, and site reliability engineers to ensure the enterprise transport infrastructure securely powers current and future mission capabilities.

Salary:

$127,624 to $187,093 per year (inclusive of TLMS and locality adjustments)

Major Duties:

• Align Network Architecture with Product Vision: Serve as the principal network architect embedded within the Product Team, directly translating the product roadmap into scalable, high-performance transport and cloud connectivity solutions.
• Design Hybrid-Cloud Transit Systems: Architect secure, high-throughput network topologies connecting on-premise data centers to cloud environments (e.g., Azure ExpressRoute), ensuring seamless data flow for enterprise applications.
• Modernize Next-Gen Endpoint Networking: Lead the design and engineering of next-generation traditional network services—such as SD-WAN, advanced LAN/WLAN, and Zero Trust Network Access (ZTNA)—to support secure, modern endpoint capabilities.
• Engineer Advanced Routing Fabrics: Design and oversee the implementation of complex enterprise routing protocols (BGP, OSPF) and modern data center fabrics (EVPN-VXLAN, software-defined networking).
• Drive Network Automation (NetDevOps): Champion the transition from manual network configuration to Infrastructure as Code (IaC) and automated provisioning, partnering with SREs to build self-healing network pipelines.
• Architect Security at the Edge (SASE): Embed robust security controls directly into the network architecture, designing micro-segmentation, next-generation firewall (NGFW) placements, and secure edge connectivity.
• Evaluate Emerging Technologies: Continuously research and prototype emerging transport and networking capabilities, providing technical recommendations to the Product Manager for future capability integration.

Key Skills

• Hybrid Cloud
• BGP
• SD-WAN
• Network Security
• Infrastructure as Code
• Cisco
• Systems Integration

Conditions of Employment:

• Must be a U.S. Citizen.
• This national security position, which may require access to classified information, requires a favorable suitability review and security clearance as a condition of employment. Failure to maintain security eligibility may result in termination.
• Incumbent is required to submit a Financial Disclosure Statement, OGE-450.
• This is a drug testing designated position
• Incumbent is required to travel away from their normal duty station to other locations within the continental United States (CONUS) and/or other locations outside the continental United States (OCONUS) up to 30 percent of the time.

Security Clearance:

• Minimum Requirement: Must possess an active Top Secret (TS) security clearance at the time of application.
• Preferred Requirement: An active Top Secret / SCI (TS/SCI) clearance is highly preferred.
• Condition of Employment: Candidates holding a TS clearance must be eligible for, and successfully obtain and maintain, SCI access upon hire.

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding.