Senior Network Engineer - TS/SCI

Parsons; Virginia; On-site; USD 104,000 - 181,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Paid time off

Flexible schedules

Life insurance

Holidays

Job summary

Parsons is seeking a Senior Network Engineer in Virginia to design, deploy, secure and sustain enterprise LAN/WAN infrastructure across classified on-premises facilities and cloud environments. You will own end-to-end networking—from physical devices to hybrid cloud connectivity with Azure—on a mission-critical program supporting national security.

The role requires DoD STIGs compliance, RMF guidance, and an active TS/SCI clearance, with hands-on Cisco IOS-XE equipment experience and strong

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline.
• 8+ years of progressive network engineering experience designing and operating enterprise LAN/WAN environments.
• Expert-level knowledge of TCP/IP, routing and switching (BGP, OSPF, VLANs, trunking), and network security principles.
• Experience with cloud networking and hybrid cloud environments.
• Cisco IOS-XE experience and scripting on routers.
• Network performance tuning, especially in VPN tunnel environments.
• Hands-on experience configuring and hardening Cisco enterprise network equipment in accordance with DoD STIGs.
• Experience supporting networks in classified, air gapped, or other secure DoD/IC environments.
• Active TS/SCI security clearance
• CCNA, CCNP (Enterprise or Security) or equivalent professional-level network certification

Responsibilities

• Design, configure, deploy, and maintain LAN/WAN infrastructure across classified on-premises environments.
• Engineer hybrid connectivity between on-premises networks and Microsoft Azure, including VPN gateways and ExpressRoute.
• Implement routing and switching protocols and services (BGP, OSPF, VLANs, QoS).
• Harden network devices in accordance with DoD STIGs and RMF compliance activities.
• Design and support air gapped and classified network segments and cross-domain solutions.
• Perform network performance monitoring, capacity planning, troubleshooting, and root-cause analysis.
• Develop and maintain network documentation including topology diagrams and IPAM.
• Support rack layout and connectivity for secure facility buildouts; participate in change management and mentor junior engineers.

Skills

LAN/WAN design

BGP

OSPF

VLANs

DoD STIGs

TS/SCI clearance

Cisco IOS-XE

Cloud networking

Scripting

Network security

Documentation

Education

Bachelor's degree

Tools

Azure ExpressRoute

VPN gateways

Job description

Job Description:

Parsons is looking for an amazingly talented Senior Network Engineer to join our team! In this role, you will design, implement, secure, and sustain enterprise network infrastructure supporting classified hybrid environments that span on-premises data center and server room infrastructure as well as multiple cloud environments. You will own the network end to end, from physical switching and routing in secure facilities to the hybrid connectivity that extends the enterprise into the cloud.

This is a hands-on engineering role on a mission-critical program where your work directly contributes to matters of national security.

What You'll Be Doing

• Design, configure, deploy, and maintain LAN/WAN infrastructure including Cisco routers and switches (Catalyst/Nexus), firewalls, and load balancers across classified on-premises environments
• Engineer and sustain hybrid connectivity between on-premises networks and Microsoft Azure, including VPN gateways, ExpressRoute, virtual network (VNet) architecture, routing, and network security groups in coordination with the cloud engineering team
• Implement and maintain routing and switching protocols and services (BGP, OSPF, EIGRP, VLANs, trunking, spanning tree, HSRP/VRRP, QoS)
• Harden network devices in accordance with DoD STIGs and maintain compliance evidence in support of RMF assessment and authorization activities
• Design and support air gapped and classified network segments, including secure boundary architectures and cross-domain considerations
• Perform network performance monitoring, capacity planning, troubleshooting, and root-cause analysis using enterprise monitoring tools
• Develop and maintain network documentation including topology diagrams, IP address management (IPAM), configuration baselines, and change records
• Support physical infrastructure efforts including rack layout, cable plant standards, and connectivity for secure facility buildouts
• Participate in change and configuration management processes, design reviews, and security assessments; mentor junior engineers

What Required Skills You'll Bring

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline; additional years of relevant experience may be considered in lieu of a degree
• 8+ years of progressive network engineering experience designing and operating enterprise LAN/WAN environments
• Expert-level knowledge of TCP/IP, routing and switching (BGP, OSPF, VLANs, trunking), and network security principles
• Experience with cloud networking and hybrid cloud (cloud plus physical on-premises network equipment)
• Cisco IOS-XE experience and scripting on routers
• Network performance tuning, especially in VPN tunnel environments
• Hands-on experience configuring and hardening Cisco enterprise network equipment in accordance with DoD STIGs
• Experience supporting networks in classified, air gapped, or other secure DoD/IC environments
• Cisco CCNA/CCNP (Enterprise or Security) or equivalent professional-level network certification
• Strong documentation skills, including the ability to create detailed engineering specifications and network diagrams
• Active TS/SCI security clearance

What Desired Skills You'll Bring

• Experience engineering hybrid cloud connectivity to Microsoft Azure or Azure Government (ExpressRoute, VPN gateways, hub-and-spoke VNet design)
• Experience with next-generation firewalls (Palo Alto, Cisco Firepower) and network access control solutions
• Familiarity with ICD 705 / SCIF infrastructure requirements and secure facility network buildouts
• Experience with network automation and infrastructure-as-code (Python, Ansible, Terraform)
• Knowledge of Type 1 encryption devices (e.g., TACLANE) and classified transport solutions
• CCIE, Azure Network Engineer Associate (AZ-700), or CISSP certification
• Experience supporting RMF authorization activities and DCSA or other government security assessments

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $103,500.00 - $181,100.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars!