Senior Network Engineer- W2 Consultants

Shrive Technologies LLC; Rockville (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

Shrive Technologies LLC is seeking a Senior Network Engineer to lead hands-on design, implementation, and support of our enterprise network, including LAN/WAN, Zscaler and security infrastructure. The role requires configuring Cisco ASA/Firepower, Palo Alto (Panorama) and VPN authentication with RSA SecurID/IIS, LDAP and RADIUS.

You’ll work onsite in Rockville, MD, with occasional after-hours maintenance windows.

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• 8+ years of network engineering experience in federal or enterprise IT environments.
• Cisco ASA 5500 / Firepower firewalls required; Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, LAN/WAN routing and switching; IPv4 and IPv6.
• Expert PCAP troubleshooting using Wireshark.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco ISE.
• RSA SecurID / RSA Authentication Manager and RADIUS/LDAP protocols.
• Azure networking with NSGs.
• Monitoring tools: SolarWinds, Riverbed, Grafana, Cribl.
• Vulnerability remediation, TLS cert renewals, change management.
• Ability to obtain Public Trust (NACI/Tier 1) and residency in the U.S.

Responsibilities

• Serve as hands-on senior engineer on HRSA’s enterprise network team.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and security infra.
• Configure and manage Cisco ASA/Firepower and Palo Alto (Panorama) firewalls.
• Implement RSA SecurID/Authentication Manager with VPN, RADIUS and LDAP; integrate with Cisco ISE.
• Troubleshoot complex network, VPN and authentication issues using Wireshark, SolarWinds, Riverbed, Grafana and Cribl.
• Design and troubleshoot IPv4/IPv6 network architectures; manage Azure NSGs.
• Perform software upgrades and TLS cert renewals during maintenance windows under change control.
• Maintain network-security SOPs, diagrams and documentation; support backup and compliance.

Skills

Cisco networking

IPv4/IPv6 routing

Network troubleshooting

VPN/RADIUS/LDAP

Network security

Azure NSGs

Education

Bachelor’s degree or equivalent

Tools

Wireshark

SolarWinds

Riverbed

Grafana

Cribl

Panorama

RSA SecurID

RSA Authentication Manager

Job description

Job Title: Senior Network Engineer

Location: Onsite, Rockville, MD

Certification: None required; CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco ISE certifications preferred

Work Schedule: Onsite Monday–Friday, business hours. Scheduled maintenance windows (e.g., Tuesdays 6–8 p.m. ET), with upgrades on weekends and some Fridays; onsite after-hours/weekend maintenance about every 9 weeks; on-call rotation about every 10 weeks

Start Date: Immediate

Job Summary

• Serve as a hands-on senior engineer on HRSA’s enterprise network team, working with the technical lead, project managers and HRSA stakeholders.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
• Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations.
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE).
• Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
• Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management.
• Maintain network-security SOPs, network diagrams and technical documentation, support backup, recovery and federal and HHS policy compliance.
• Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement.

Required Qualifications

• Bachelor’s degree or an equivalent combination of education and experience.
• 8+ years of network engineering experience in federal or enterprise-level IT environments.
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
• Azure networking with network security groups (NSGs).
• SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
• Vulnerability remediation, TLS certificate renewal and installation, and change management processes.li>
• Writing, maintaining and implementing network-security SOPs and technical documentation (required).
• Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
• Strong problem-solving, communication and organizational skills.
• Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.

Preferred Qualifications

• Experience supporting HHS or other federal civilian agency networks.
• Current or recent federal Public Trust investigation.
• CCNP, Palo Alto PCNSE, Zscaler or Cisco ISE certifications.
• NetScaler / Citrix ADC exposure.