Lead Network Engineer

Job Title: Lead Network Engineer

Location: Rockville, MD

Job Summary

• Serve as the hands-on technical lead for HRSA’s enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.
• Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
• Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause.
• Plan and execute Cisco switch and firewall software upgrades, technology refresh and enhancements during scheduled maintenance windows under change management.
• Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE) for network access control.
• Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
• Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy, including backup and recovery.
• Own network-security standard operating procedures (SOPs), network diagrams and technical documentation; coach and develop less-experienced engineers.
• Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware, software and vendor procurement.

Required Qualifications

• Bachelor’s degree or an equivalent combination of education and experience.
• 10+ years of network engineering experience in federal or enterprise-level IT environments.
• 5+ years leading a team of network engineers while remaining hands-on, and working directly with a client counterpart.
• Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
• Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
• Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
• Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).
• RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
• Azure networking with network security groups (NSGs).