Zero-Trust Cisco Network Engineer — Hybrid DC

INNOVIM; Washington (District of Columbia); Hybrid; USD 92,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Retirement plan

Paid time off

Professional development

Job summary

INNOVIM seeks a Network Engineer to provide secure engineering and operational support for a Cisco-based enterprise network in a U.S. legislative environment. The role focuses on Zero Trust design, implementation, and ongoing hardening across switches, routers, and perimeter systems.

The candidate will enforce NIST SP 800-53 and SP 800-207 standards, manage 802.1X NAC, and support 24/7 monitoring, incident response, and RMF-based patching. Hybrid work with on-site as needed in Washington, DC.

Qualifications

• Bachelor's degree or equivalent experience.
• 8+ years in enterprise network engineering with Cisco environments.
• Expertise in routing, switching, VLANs, DNS/DHCP, VPNs, and 802.1X NAC.
• Working knowledge of NIST SP 800-53 and NIST SP 800-207 Zero Trust Architecture.
• Active Cisco certification (CCNP or CCNA) or equivalent expertise.
• U.S. citizenship or permanent residence; ability to obtain Public Trust (Tier 2).

Responsibilities

• Operate Cisco core, distribution, access, and edge network infrastructure for reliability and performance.
• Configure routing, switching, VLANs, DNS/DHCP, VPNs with secure configurations.
• Implement and maintain NIST-aligned security controls (AC, CM, SC, AU).
• Enforce Zero Trust segmentation and continuous verification of users/devices.
• Deploy 802.1X NAC across all network layers.
• Harden devices; manage firewall rules, MFA for admin access.
• Centralize logging; support 24/7 monitoring and alerts.
• Coordinate RMF-based patching and vulnerability remediation.
• Support incident responses and RCAs; maintain diagrams and SOPs.
• Collaborate with cloud, MS engineering, and cybersecurity teams.

Skills

Cisco routing & switching

Zero Trust architecture

NIST RMF

Network security

802.1X NAC

CCNP or CCNA

Public Trust clearance

Education

Bachelor's degree in CS/IT/Engineering

Tools

Cisco ISE

SIEM

SolarWinds

Splunk

Job description

INNOVIM seeks a Network Engineer to provide secure engineering and operational support for a Cisco-based enterprise network in a U.S. legislative environment. The role focuses on Zero Trust design, implementation, and ongoing hardening across switches, routers, and perimeter systems.

The candidate will enforce NIST SP 800-53 and SP 800-207 standards, manage 802.1X NAC, and support 24/7 monitoring, incident response, and RMF-based patching. Hybrid work with on-site as needed in Washington, DC.