Lead Network Engineer

Job Title: Lead Network EngineerLocation: Rockville, MD

Do you have the right skills and experience for this role Read on to find out, and make your application.
Job SummaryServe as the hands-on technical lead for HRSA’s enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause.Plan and execute Cisco switch and firewall software upgrades, technology refresh and enhancements during scheduled maintenance windows under change management.Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (ISE) for network access control.Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy, including backup and recovery.Own network-security standard operating procedures (SOPs), network diagrams and technical documentation; coach and develop less-experienced engineers.Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware, software and vendor procurement.Required QualificationsBachelor’s degree or an equivalent combination of education and experience.10+ years of network engineering experience in federal or enterprise-level IT environments.5+ years leading a team of network engineers while remaining hands-on, and working directly with a client counterpart.Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (ISE).RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP). xzbcwsv Azure networking with network security groups (NSGs).