Network Engineer Intermediate

## Overview The Network Engineer provides engineering, operations, and cybersecurity support for the Congressional Budget Office’s (CBO) enterprise Cisco network infrastructure. This position is responsible for designing, implementing, securing, monitoring, and maintaining network architectures that support Zero Trust principles, federal cybersecurity requirements, and mission-critical operations. The Network Engineer supports network modernization efforts, incident response remediation, vulnerability management, and secure network operations while ensuring compliance with NIST standards and industry best practices. ## Responsibilities **Network Engineering & Operations** - Design, implement, and maintain secure enterprise network architectures across core, distribution, access, and edge environments. - Configure, manage, and troubleshoot Cisco routing, switching, VLANs, DNS, DHCP, VPNs, and related network services. - Monitor network performance, availability, and capacity to ensure reliable and resilient operations. - Maintain network diagrams, configuration baselines, and technical documentation. - Support continuous network monitoring and operational support activities. **Cybersecurity & Compliance** - Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207 (Zero Trust Architecture). - Enforce network segmentation, micro-segmentation, least-privilege access, and secure access controls. - Manage 802.1X network access control solutions and secure perimeter infrastructure. - Harden network devices using approved security baselines and maintain compliance with federal cybersecurity requirements. - Support vulnerability assessments, patch management, firmware updates, and remediation activities. - Maintain centralized logging, audit capabilities, and SIEM integrations. **Incident Response, Documentation & Collaboration** - Support incident response activities through network analysis, containment actions, and forensic data collection. - Conduct root cause analysis for outages, performance issues, and security events. - Ensure network changes comply with formal change management processes and security impact assessments. - Develop and maintain Standard Operating Procedures (SOPs), network documentation, and configuration records. - Serve as a technical advisor for complex network issues and collaborate with cloud, Microsoft, cybersecurity, and infrastructure teams. ## Qualifications - Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field (or equivalent combination of education and experience). - Minimum eight (8) years of enterprise network engineering experience. - Experience implementing Zero Trust Architecture, network segmentation, and access control solutions. - Experience with routing, switching, firewalls, VPNs, DNS, DHCP, network monitoring, and vulnerability management. - Knowledge of NIST SP 800-53, NIST SP 800-207, Risk Management Framework (RMF), and federal cybersecurity requirements. - Strong troubleshooting, analytical, communication, and documentation skills. **Preferred Certifications** - Cisco Certified Network Administrator (CCNA) - Security+, or equivalent industry certification **Security Requirements** - U.S. Citizenship required. - Ability to obtain and maintain a Public Trust or higher-level government clearance, as required.