Senior Network Infrastructure Engineer

Nyla Technology Solutions; Corridor North (MD); On-site; USD 158,000 - 187,000; Full time

Job summary

Nyla Technology Solutions is seeking a Network Systems & Zero Trust Engineer in the United States (MD Corridor North) to design, deploy, and maintain high-performance networks in a distributed software engineering environment. The role emphasizes hands-on configuration, security posture monitoring, and automated network workflows using tools such as Forward Networks, Wireshark, and Nessus.

A Bachelor's degree plus 12+ years of analytics experience or a high school diploma with 16+ years of

Qualifications

• Hands-on experience configuring and troubleshooting enterprise networks.
• Ability to analyze granular network metrics with tools like Wireshark or tcpdump.
• Experience deploying Forward Networks or similar digital-twin platforms.
• Solid understanding of Zero Trust security principles and Know Your Network concepts.
• Experience supporting distributed development environments and CI/CD pipelines.

Responsibilities

• Assist in all phases of network management from design to deployment and upgrades.
• Implement robust communication system requirements and architecture for high-performance environments.
• Analyze quantitative network behavior to resolve complex connectivity issues.
• Support network devices across multi-vendor ecosystems (routers, switches, firewalls).
• Maintain VLANs and interconnects for distributed software engineering environments.

Job description

ACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIRED

The Network Systems & Zero Trust Engineer assists in all phases of network management—from initial architecture design through active deployment, operational maintenance, and hardware/software upgrades. This role supports the distributed functionality of high-performance software engineering environments by implementing robust communication system requirements, analyzing quantitative network behavior, and resolving complex connectivity issues.

The annual base salary range for this role is $158,000-$187,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.

Required Skills

1. Comprehensive Network Administration & Engineering: Hands-on experience configuring, maintaining, and troubleshooting enterprise/mission network devices (routers, switches, firewalls) across multi-vendor environments.
2. Network Performance & Traffic Analysis: Strong capability analyzing granular network metrics—including connect time, latency, packet size distribution, and throughput—using tools like Wireshark or tcpdump to diagnose bottlenecks and guide procurement decisions.
3. Network Modeling & Digital Twin Platforms: Direct practical experience deploying, configuring, and operating Forward Networks (or equivalent network verification/digital-twin platforms) to generate dynamic network maps, audit configurations, and map attack surfaces.
4. Zero Trust Architecture (ZTA) Implementation: Solid technical understanding of Zero Trust security principles, specifically "Know Your Network" capabilities such as automated asset discovery, continuous posture monitoring, and network segmentation.
5. Software Engineering Environment Support: Proven ability to implement and sustain communication requirements, VLANs, and interconnects supporting distributed development frameworks, build pipelines, and developer test environments.

Education: Bachelor's Degree in Data Analytics, Intelligence Studies, Computer Science, Finance/Economics, or a related discipline, PLUS 12+ years of specialized data analytics or financial intelligence experience OR High School Diploma / GED, PLUS 16+ years of hands-on intelligence analysis, financial tracking, and data discovery experience in lieu of a degree.

Desired Skills

1. Cross-Domain & High-Side Systems Integration: Familiarity with integrating isolated networks (Mission Islands) with enterprise High-Side models, including cross-domain data movement and strict multi-level security standards.
2. Network Automation & Scripting: Proficiency writing automation scripts in Python or Bash, or using configuration management frameworks such as Ansible to automate network device configurations and compliance audits.
3. Firewall & Access Policy Management: Practical experience defining and auditing Layer 4-7 access control lists (ACLs) and stateful firewall policies (e.g., Palo Alto Networks, Cisco ASA/Firepower).
4. Vulnerability Assessment & Remediation: Familiarity correlating network topology maps with vulnerability scanners (e.g., Nessus, ACAS) to remediate network exposure and maintain compliance with security technical implementation guides (STIGs).
5. Network Documentation & Architecture Design: Proven experience reviewing and authoring formal system specifications, interface control documents (ICDs), and high-level network topology diagrams using Visio or similar tools.