SME Network Engineer
Harmonia Holdings Group, LLC
Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
Benefits offered by this job
Job summary
Revolutional is seeking an experienced SME Network Engineer to support DHS, providing hands-on leadership across architecture, routing, switching, firewalls, VPN, and PKI integration. You will design, implement, and sustain secure, resilient networks while collaborating with cross-functional teams to meet mission requirements.
Role requires DHS clearance readiness, US citizenship, and the ability to telework up to 2 days weekly in Lorton, VA with 3 days onsite, plus occasional CONUS travel.
Qualifications
- Bachelor’s degree in IT, Engineering, or related field OR 5+ years equivalent enterprise network experience.
- 10+ years of enterprise network engineering experience with increasing responsibility.
- Extensive Cisco routing/switching (3k–9k) with Palo Alto or Fortinet firewalls and VPN/IPsec.
- Ability to design VLAN/VRF segmentation, firewall zoning, and COOP/DR networks.
- Strong documentation skills producing network diagrams and accreditation-ready artifacts.
Responsibilities
- Design, document, and maintain Layer 2/3 topology, IP schema, VLAN/VRF segmentation, and routing design.
- Lead outages diagnosis, resolution, packet captures, flow analysis, and log correlation.
- Engineer firewall policies and support IA/ATO documentation requirements.
- Document dependencies across AD, DNS/DHCP, VMware vSphere, storage, and apps; validate end-to-end functionality.
- Contribute to COOP/DR planning and lab engineering; maintain lab environments for testing.
- Maintain technical documentation, diagrams, IP plans, SOPs, and config repositories.
- Coordinate with Revolutional and DHS leads to resolve issues and sustain mission readiness.
Skills
Education
Tools
Job description
Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.
We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.
Lorton, VA (22079)
U.S. Citizen (required for access to DHS IT systems)
Must be able to obtain and maintain DHS Public Trust
Full-time; 8-hour workdays with on-call support as needed.
Lorton, VA roles may telework up to 2 days per week; 3 days onsite required (subject to mission needs)
Occasional CONUS travel; local travel within 50 miles is not reimbursable
$130-160k DOE
Revolutional is seeking an experienced SME Network Engineer to support Department of Homeland Security (DHS). This role provides hands-on leadership across all network engineering functions, including architecture, routing, switching, firewall engineering, VPN and PKI integration, segmentation design, troubleshooting, and IA/accreditation-grade documentation. The SME ensures the integrity, resilience, and performance of mission-critical networks and collaborates closely with Systems, Virtualization, Storage, and Field Engineering teams to ensure end-to-end operational success. This position supports DHS’s mission while contributing to Revolutional's overarching goals: delivering premier technology services, driving mission-focused innovation, sustaining organizational excellence, and being an employer of choice for skilled professionals.
- Design, document, and maintain network architecture, including:
- Layer 2/Layer 3 topology
- IP address schema and subnetting
- VLAN/VRF segmentation
- Routing design (OSPF, BGP, EIGRP, static routing)
- Firewall zoning, NAT policies, and security segmentation
- VPN tunnels, encrypted transport paths, and PKI integrations
- COOP/DR network routing and failover paths
- Produce and maintain authoritative network diagrams, data flows, trust boundaries, and configuration baselines.
- Evaluate, recommend, and implement enhancements to improve security, availability, and performance.
- Serve as the primary network engineer for diagnosing, resolving, and preventing outages across the enterprise.
- Perform packet-level analysis (Wireshark/tcpdump), flow analysis, and log correlation to identify and remediate issues.
- Lead network upgrades, configuration changes, ACL/policy adjustments, and planned maintenance.
- Monitor network performance and availability; tune routing, firewall, and VPN parameters as needed.
- Engineer and maintain firewall policies and segmentation (Palo Alto preferred; Fortinet/Cisco ASA experience acceptable).
- Support security hardening, vulnerability remediation, and IA/ATO documentation requirements.
- Produce accreditation-ready artifacts, including boundary diagrams, data-flow representations, rule documentation, and enclave segmentation maps.
- Collaborate with ISSO and security teams to address findings and strengthen compliance posture.
- Document and support network dependencies across Active Directory, DNS/DHCP, VMware/vSphere, SAN/iSCSI/NFS storage, and application tiers.
- Validate end-to-end system functionality after network changes.
- Partner with Systems, Virtualization, Storage, and Field SMEs to maintain seamless operations across sites.
- Contribute to COOP/DR planning, design, and testing to ensure high availability and rapid failover capabilities.
- Support lab environment setup for replication, patch validation, and network simulation.
- Maintain technical documentation, diagrams, IP plans, SOPs, and configuration repositories.
- Coordinate with Revolutional and DHS technical leads to resolve issues, support field operations, and sustain mission readiness.
- Bachelor’s degree in IT, Engineering, or related field OR +5 years equivalent experience.
- 10+ years of enterprise network engineering experience with increasing responsibility.
- Deep hands-on experience with:
- Cisco routing/switching (3k–9k platforms)
- Palo Alto or Fortinet firewalls and policy design
- VPN architecture, IPsec tunneling, PKI integration
- Network segmentation using VLANs, VRFs, and security zones
- Packet capture and analysis
- Network monitoring and telemetry tools (SolarWinds, NetFlow, Splunk, etc.)
- Demonstrated ability to produce complete network diagrams and architecture documentation based solely on device configuration, logs, and analysis.
- Strong understanding of cross-domain interactions (DNS, AD, VMware networking, SAN connectivity).
- CCNA, CCNP Enterprise or CCNP Security
- PCNSE
- Fortinet NSE4/NSE5
- CCIE-level competency (or equivalent expertise)
Additional certifications may be required after hire and must be obtained within designated timelines.
- Excellent communication skills with both technical and non-technical stakeholders.
- Proven ability to work independently in high-pressure, mission-critical environments.
- Strong analytical, investigative, and documentation skills.
- Experience supporting federal law enforcement IT systems or aligned mission operations.
- Hands-on participation in COOP/DR architecture or failover site execution.
- Experience with VPN transitions, network segmentation, and multi-site resiliency.
- Familiarity with Kubernetes/container environments (e.g., JSI platforms).
- Experience supporting 24/7 high-availability operations.
- Strong initiative and attention to detail.
- Adaptability to evolving mission requirements and operational tempo.
- Collaborative approach with technical teams, vendors, and government partners.
- Alignment with Revolutional's principles of excellence, collaboration, curiosity, and integrity.
- Must regularly lift/move up to 50 lbs.; occasionally up to 80 lbs. using a hand truck or lift cart.
- Requires standing, kneeling, crouching, and navigating server-room environments.
- Normal vision and hearing required; moderate server-room noise.
#DICE #CJ
- Recognized as a Top 20 "Best Place to Work in Virginia"
- Recipient of Department of Labor's HireVets Gold Medallion
- Great Place to Work Certification for five years running
- A Virginia Chamber of Commerce Fantastic 50 company
- A Northern Virginia Technology Council Tech 100 company
- Inc. 5000 list of fastest growing companies for eleven years
- Two-time SBA SBIR Tibbett's Award winner
- Virginia Values Veterans (V3) Certification
We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to
- Traditional and HSA- eligible medical insurance plans
- 100% employer-paid dental and vision insurance options
- 100% employer-sponsored STD, LTD, and life insurance
- 5% 401(k) company matching
- Flexible-schedules and teleworking options
- Paid holidays and PTO Accrual Plans
- Paid Parental Leave
- Professional development and career growth opportunities
- Team and company-wide events, recognition, and appreciation-- and so much more!
Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career!
Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact HR@revolutional.com.
"Know Your Rights: Workplace Discrimination is Illegal" Poster | U.S. Equal Employment Opportunity Commission
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
