We are seeking a Senior Network Engineer to design, implement, secure, and support enterprise network infrastructure across LAN/WAN/WiFi, datacenters, and cloud connectivity within a CMMC-regulated environment. This role requires deep technical expertise in enterprise networking plus hands-on experience supporting NIST 800-171 controls and CUI (Controlled Unclassified Information) boundary protection.
Key Responsibilities
- Design, implement, and maintain enterprise network infrastructure (LAN/WAN/WLAN) in alignment with CMMC/NIST 800-171 requirements.
- Lead the design and implementation of Cisco SD-Access (SDA) across the environment, including DNA Center-managed fabric (wired and wireless), SGT/TrustSec-based segmentation, and fabric-based CUI boundary enforcement.
- Manage and optimize routing and switching environments (SD-WAN, BGP, OSPF, EIGRP, VLANs, STP, HSRP/VRRP).
- Configure and support firewalls, VPNs, and network security controls enforcing CUI boundary segmentation.
- Design and maintain network architecture supporting CUI enclaves, including access control, encryption in transit, and audit logging per NIST 800-171 / DFARS 252.204-7012.
- Lead network upgrades, migrations, and infrastructure projects with attention to compliance boundary impact.
- Support and troubleshoot network performance issues and outages (root cause analysis).
- Monitor network health using tools like SolarWinds / ThousandEyes (or similar), including compliance-relevant traffic visibility and alerting.
- Maintain network documentation: diagrams, IP schema, standards, runbooks, and System Security Plan (SSP) network artifacts.
- Support CMMC self-assessment or C3PAO assessment activities by providing network evidence, diagrams, and control narratives.
- Work with service providers for circuit turn-ups, troubleshooting, and escalations.
- Ensure high availability, redundancy, and disaster recovery readiness.
- Mentor junior engineers and provide technical guidance.
- Participate in on-call rotation and after-hours maintenance.
Cloud Networking (AWS / Azure)
- Design and support cloud network architecture: AWS VPC / Transit Gateway / Route Tables / NACLs / Security Groups; Azure VNet / VNet Peering / UDR / NSGs / Cloud Firewall.
- Implement secure hybrid connectivity: IPsec site-to-site VPN, AWS Direct Connect / Azure ExpressRoute.
- Implement cloud segmentation and secure routing patterns specifically for CUI-handling workloads.
- Support cloud security integrations: centralized logging/monitoring, network traffic visibility and alerting mapped to NIST 800-171 controls.
- Partner with cloud engineering and compliance/GRC teams to ensure compliant connectivity for CUI workloads.
Required Qualifications
- Bachelor's degree in IT/Computer Science or equivalent experience.
- 7+ years of hands-on enterprise network engineering experience.
- Demonstrated experience supporting a network environment under CMMC / NIST 800-171 / DFARS 252.204-7012 requirements — implementation or assessment support, not just familiarity.
- Strong knowledge of routing and switching (Cisco); TCP/IP, subnetting, DNS, DHCP, InfoBlox; WAN technologies (DMVPN, SD-WAN, DIA, broadband); wireless networking (Cisco/Meraki).
- Experience with firewalls (Palo Alto / Cisco ASA/FTD), VPN (site-to-site, remote access), and network segmentation for regulated/CUI environments.
- Strong troubleshooting skills using packet capture tools (Wireshark/tcpdump).
- Experience contributing to or supporting SSP, POA&M, or CMMC assessment documentation.
- Excellent communication and stakeholder management skills.
Preferred Qualifications
- CMMC RP, CCP, or CCA credential (or actively pursuing).
- CCNP / CCIE (Enterprise or Security).
- PCNSE / NSE.
- SD-WAN experience (Viptela, etc.).
- Automation experience (Python, Ansible, Terraform, API-based networking).
- NAC experience (Cisco Client, ClearPass).
- Prior experience on a DoD/federal contractor network supporting an active CMMC assessment cycle.