Systems Engineer Architect Senior

Career Listings; Springfield (VA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking aSenior Network Engineer to design, implement, and sustain enterprise LAN/WAN infrastructure in a DoD environment at Fort Belvoir, VA or Albuquerque, NM. The role requires hands-on Cisco routing and switching and Palo Alto security expertise to support classified and enterprise operations.

The ideal candidate will collaborate with multidisciplinary teams, manage complex networks, ensure RMF compliance, and maintain secure remote access and VPN capabilities in a

Qualifications

• Bachelor's degree in CS/IT/engineering with 8+ years of relevant experience.
• Active DoD 8570/8140 IAT Level II certification.
• Active CCNA certification.
• Active Secret clearance with ability to obtain Top Secret with SCI eligibility.
• Experience designing, implementing, and supporting enterprise Cisco network infrastructure.
• Strong knowledge of TCP/IP, IPv4/IPv6, DNS/DHCP/IPAM, VLANs, QoS, OSPF, MPLS, SASE.
• Hands-on experience configuring Palo Alto firewalls and GlobalProtect Remote Access.
• Experience with secure remote-access and site-to-site VPN technologies.
• Demonstrated experience troubleshooting enterprise LAN/WAN environments.
• Experience supporting DoD enterprise networks; strong written and verbal communication.

Responsibilities

• Design, implement, configure, and maintain enterprise LAN and WAN infrastructure.
• Engineer and support Cisco routing and switching environments for mission-critical networks.
• Configure, troubleshoot, and optimize routing/switching: TCP/IP, IPv4/IPv6, VLANs, STP, HSRP/VRRP.
• Support WAN connectivity utilizing MPLS, VPN, and Internet-based transport technologies.
• Configure, administer, and maintain Palo Alto next-generation firewalls.
• Design, implement, and support GlobalProtect remote access and site-to-site VPNs.
• Monitor network health, analyze performance, identify bottlenecks and resolve issues.
• Develop and maintain engineering docs, diagrams, and SOPs.
• Participate in technology refreshes and infrastructure upgrades.
• Collaborate with cybersecurity to ensure RMF, STIGs, and Zero Trust compliance.
• Support scheduled maintenance, incident response, and high-availability operations.

Skills

LAN/WAN design & engineering

Network troubleshooting

Security & RMF awareness

Documentation & SOPs

Team collaboration

Communication skills

Project management

Education

Bachelor's degree in CS/IT/Engineering

Tools

CCNA certification

IAT Level II (Security+ / CySA+)

Cisco networking

Palo Alto firewalls

GlobalProtect VPN

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Tuition assistance
• Vision insurance

SarelaTech is seeking a Senior Network Engineer to support the design, implementation, modernization, and sustainment of enterprise network infrastructure within a fast-paced Department of Defense (DoD) environment in Fort Belvoir, VA or Albuquerque, New Mexico. The successful candidate will provide engineering expertise for mission-critical Local Area Network (LAN), Wide Area Network (WAN), and secure network infrastructure supporting classified and enterprise operations.

The ideal candidate is an experienced network engineer with extensive knowledge of Cisco networking technologies, Palo Alto Networks security solutions, and enterprise routing and switching. This individual will work independently and collaboratively with multidisciplinary engineering teams to deliver secure, resilient, and scalable network solutions that support evolving customer mission requirements.

Clearance: TS/SCI Security Clearance

Primary Responsibilities:

• Design, implement, configure, and maintain enterprise LAN and WAN infrastructure.
• Engineer and support Cisco routing and switching environments for mission-critical networks.
• Configure, troubleshoot, and optimize enterprise routing and switching technologies, including:
  • * OSPF
  • * BGP* VLANs* Spanning Tree Protocol (STP)* HSRP/VRRP
• Support WAN connectivity utilizing MPLS, VPN, and Internet-based transport technologies.
• Configure, administer, and maintain Palo Alto Networks next-generation firewalls.
• Design, implement, and support secure Palo Alto GlobalProtect remote access and site-to-site VPN solutions.
• Monitor network health, analyze performance, identify bottlenecks, and implement corrective actions.
• Perform advanced Layer 1–7 network troubleshooting using industry-standard diagnostic tools.
• Develop and maintain engineering documentation, implementation plans, network diagrams, and standard operating procedures.
• Participate in technology refreshes, network modernization efforts, and infrastructure upgrades.
• Collaborate with cybersecurity personnel to ensure compliance with DoD cybersecurity policies, RMF requirements, and applicable STIGs.
• Support scheduled maintenance activities, incident response, and operational troubleshooting in a high-availability environment.

Required Qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related discipline with 8+ years of relevant experience. Additional years of experience may be substituted for a degree.
• Active DoD 8570/8140 IAT Level II certification (Security+, CySA+, or equivalent).
• Active Cisco Certified Network Associate (CCNA) certification.
• Active Secret security clearance with the ability to obtain and maintain Top Secret clearance with SCI eligibility.
• Extensive experience designing, implementing, and supporting enterprise Cisco network infrastructure.
• Strong working knowledge of:
  • * TCP/IP* IPv4/IPv6* DDI (DNS / DHCP / IPAM)* NAT* VLANs* Copper and fiber optic cabling standards* Quality of Service (QoS)* OSPF* MPLS* Secure Access Service Edge (SASE) technologies
• Hands-on experience configuring and administering Palo Alto Networks next-generation firewalls, including security policies, NAT, threat prevention, and GlobalProtect.
• Experience implementing and supporting secure remote-access and site-to-site VPN technologies.
• Demonstrated experience troubleshooting enterprise LAN and WAN environments.
• Experience supporting networking solutions within a fast-paced Department of Defense enterprise.
• Excellent written, verbal, and interpersonal communication skills.
• Ability to manage multiple priorities while working independently and as part of a technical team.

Desired Qualifications

• Cisco Certified Network Professional (CCNP) certification.
• Experience with Border Gateway Protocol (BGP) and advanced Software-Defined WAN (SD-WAN) architectures.
• Experience deploying and supporting Versa Networks or similar SD-WAN solutions.
• Experience with network automation using Python, Ansible, and Infrastructure-as-Code (IAC) technologies.
• Familiarity with Network Access Control and Comply-to-Connect technologies such as Cisco Identity Services Engine (ISE) and IEEE 802.1X authentication.
• Experience with enterprise network monitoring platforms such as SolarWinds or PRTG.
• Experience supporting hybrid cloud networking in Microsoft Azure and/or AWS environments.
• Knowledge of DoD Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and Zero Trust networking principles including SD-WAN, micro- and macro-segmentation, and Zero Trust Network Access (ZTNA).
• Familiarity with break-and-inspect, reverse-web-proxy, and other application-based firewall features.
• Experience reviewing packet capture data for troubleshooting and packet analysis.
• Experience supporting on-prem virtualization platforms such as vSphere.