Cloud Network Engineer

Location: Herndon, VA or Washington, DC (on-site)
Clearance: Active TS/SCI Type: Full-time
Overview
This engineer designs the network layer underneath secure cloud platforms for a federal program. Expect hard routing, segmentation, and connectivity problems across tightly managed AWS environments where uptime and security carry equal weight.
What You Will Do

• Segment networks and apply controls using AWS Network Firewall, NACLs, and security groups.
• Build and troubleshoot DNS, VPN, Direct Connect, and Transit Gateway integrations.
• Architect AWS VPCs, covering subnet layout, route design, and private connections to services.
• Work with infrastructure and security engineers on approved connectivity and change control.

What You Bring

• 5+ years of network engineering, 3+ of them focused on AWS networking.
• Hands-on VPC routing, network security controls, and private connectivity.
• Support of isolated, complex, or heavily regulated networks.
• Comfort working in highly controlled environments.

Nice to Have

• CCNP or AWS Advanced Networking Specialty.
• Multi-region AWS connectivity with strict network boundaries.
• Other AWS Professional or Specialty certifications. Security+ or CISSP where relevant.

Additional Requirements

• Current, active TS/SCI. You must also qualify for SCI indoctrination and any program-level access approvals the customer requires.
• U.S. citizenship is required under the terms of the government contract.
• You must live within a reasonable daily commute of the secure site in Herndon, VA or Washington, DC.
• Full-time and fully on-site in an accredited secure facility, with occasional visits to approved customer sites. Remote work is not an option.