Senior Network Engineer

The Senior Network Engineer provides Tier‑3/Tier‑4 engineering expertise for design, implementation, troubleshooting, and optimization of the HSEN WAN and HQ LAN‑A infrastructure, ensuring ≥99.5% availability for critical services. The role supports configuration management, change control, security patching, and incident response across routers, switches, firewalls, VPN/DMVPN/SD‑WAN, wireless, and cloud network components.

The objective of the support services for this project is to design, build, and maintain a cloud infrastructure with a focus on network security that supports the organization's technology and business needs. This involves architecting scalable, secure, and highly available cloud solutions, ensuring optimal performance and cost‑efficiency in cloud environments such as AWS, Azure, and Google Cloud. The role requires close collaboration with other IT teams, stakeholders, and third‑party vendors to deliver cloud‑based infrastructure and services that align with organizational goals.

• Engineer and implement upgrades to WAN/LAN per approved designs; validate in lab prior to production cut‑over.
• Perform advanced routing (OSPF/BGP/DMVPN/SD‑WAN), QoS, multicast, and segmentation.
• Integrate new security controls (NGFW, IDS/IPS, ZTNA) and support ATO evidence collection.

• Provide Tier‑3 escalation and Tier‑4 manufacturer liaison for Priority‑1/2 incidents.
• Execute vulnerability remediation and patch management per DHS severity windows.
• Coordinate change‑management reviews and post‑implementation validation.

• Develop and maintain device configurations, SOPs, logical/physical diagrams in CMDB/Service Now.
• Generate weekly service‑request metrics, monthly availability, and root‑cause reports.
• Contribute to automation scripts (Ansible/Python) and network‑modernization prototypes.

• Operational Support
• Software Maintenance and Upgrades
• Telecommunications Maintenance (Data, Voice, Images, including Wireless)
• Infrastructure Management Services (IMS)
• Configuration Management
• Network/Hardware Support
• IT Support (Tier 3 network support)
• Resource Management
• Backup and Recovery Management
• Installation, Configuration, and Tuning
• Electronic Software Licensing Services including license: deployment, management, tracking, upgrading, etc.
• Infrastructure System Management – Firewalls, etc.
• IT Operation and Maintenance Planning
• Data Quality Management
• Transformation Services
• Continual Service Improvement
• Balanced Scorecard for Operations
• IT Infrastructure Optimization

• Master’s degree in Information Technology, Network Engineering, or related field.
• 15+ years progressive network engineering in large enterprise WAN/LANs.
• Experience using various platforms such as SharePoint, JIRA, and Confluence for project management.

• 10+ years supporting DHS WAN/LAN environments.
• Experience with DHS cloud networking and automation (Infrastructure as Code).
• Experience leading network modernization projects for DHS.

• Required
  
  Certifications:
  
  Active CCIE (Enterprise Infrastructure or Security).
• Preferred Certification:
  Cisco Dev Net Professional, Palo Alto PCNSE, Juniper JNCIP, ITILv4, or GIAC‑GCIH.

• U.S. Citizen with ability to obtain DHS Public Trust / Full‑Scope BI.

• Location:
  
  DHS HQ (NCR) with hybrid remote option; periodic travel (