Senior Network Engineer
Summary
Senior individual contributor who leads architecture, security, and lifecycle management of enterprise, data center, and research networks — routing/switching (Cisco/Juniper/Aruba), firewalls, VPNs, NIST 800-171/CMMC compliance, plus senior support for Windows/Linux and VMware services. On-site in Beavercreek, OH or Huntsville, AL; US citizenship and clearance eligibility required.
|
Position Title
|
Senior Network Engineer
|
Reports to
|
Director, Information Technology System
|
|
Effective Date
|
11-1-26
|
FLSA Status
|
Exempt
|
|
Employment Status
|
Full-Time
|
Work Location
|
On-Site
|
|
Location
|
Parallax HQ: 4035 Colonel Glenn Hwy, Beavercreek, OH 45431, or Huntsville, AL [TBD]
|
- Lead design and modernization of LAN/WAN, wireless, data center, and segmented research networks, and define technical roadmaps, standards, and capacity plans.
- Own advanced routing, switching, and segmentation designs (TCP/IP, VLANs, ACLs, OSPF, BGP, STP, 802.1Q), weighing performance, reliability, and security tradeoffs.
- Architect secure connectivity for laboratories, compute clusters, virtualization hosts, storage, and government program enclaves, maintaining required separation of environments.
- Engineer and administer enterprise switches, routers, next-generation firewalls, VPNs, and network access controls, with resilient, high-availability designs.
- Serve as the senior escalation point for critical network incidents and lead packet-level troubleshooting, root cause analysis, and corrective actions.
- Maintain network monitoring, alerting, and performance reporting.
- Assess change risk and follow change management procedures for planned changes and maintenance windows, including after-hours work.
- Lead network controls supporting CUI protection, NIST SP 800-171, CMMC Level 2, and applicable federal requirements, and coordinate hardening and vulnerability remediation.
- Partner with cybersecurity staff on logging, incident response, least-privilege access, secure remote access, firewall rule governance, and audit evidence.
- Provide senior-level support for Windows Server and Linux services, Active Directory/Group Policy, DNS/DHCP, VMware/Hyper-V, patching, and backup and recovery coordination.
- Drive infrastructure deployments and upgrades, and develop architecture diagrams, configuration baselines, IP address plans, operating procedures, and disaster recovery documentation.
- Evaluate products, guide vendors and service providers, and manage network hardware lifecycle, maintenance contracts, and circuits.
- Review designs, share technical expertise with less experienced engineers and administrators, and communicate recommendations and risks to stakeholders.
- Follow all requirements for handling CUI and classified information and systems.
- Other duties as assigned.
- US Citizenship.
- Bachelor's degree in Computer Science, Information Technology, Network Engineering, Cybersecurity, or a related field; equivalent relevant experience may be considered.
- 8+ years of progressively responsible enterprise network engineering experience, including ownership of complex designs, migrations, and high-severity troubleshooting.
- Advanced hands-on knowledge of enterprise routing and switching, firewall administration, VPNs, segmentation, network monitoring, and packet analysis.
- Experience with enterprise platforms such as Cisco, Juniper, or Aruba, and core services including DNS, DHCP, NTP, SNMP, RADIUS, and TACACS+.
- Working knowledge of Windows Server, Linux, Active Directory/Group Policy, VMware or Hyper-V, and secure server operations.
- Demonstrated ability to lead technical projects, produce clear architecture documentation, and communicate risks and decisions.
- Ability to obtain and maintain a U.S. Government security clearance as required by assigned programs.
- Availability for scheduled after-hours maintenance and on-call support for critical incidents.
- CCNP or equivalent advanced networking certification; Security+, CISSP, CCIE, or relevant Microsoft or VMware credentials.
- DoD 8140 qualification (for example, Security+ CE) for privileged access to DoD systems.
- Experience with DoD or federal programs, isolated or classified environments, secure research laboratories, and high-performance computing or data center networks.
- Familiarity with CMMC Level 2, NIST SP 800-171/800-53, RMF, DISA STIGs, vulnerability management, and assessment support.
- Network automation with Python, PowerShell, or Ansible, and hybrid cloud networking in Azure or AWS.
- Active Secret clearance or higher.