Job description

Job Summary • Serve as a hands-on senior engineer on HRSA's enterprise network team, working with the technical lead, project managers and HRSA stakeholders. • Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems. • Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations. • Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (Client). • Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl. • Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs). • Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management. • Maintain network-security SOPs, network diagrams and technical documentation; support backup, recovery and federal and HHS policy compliance. • Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement. Required Qualifications • Bachelor's degree or an equivalent combination of education and experience. • 8+ years of network engineering experience in federal or enterprise-level IT environments. • Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama. • Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6. • Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark. • Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (Client). • RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP). • Azure networking with network security groups (NSGs). • SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting. • Vulnerability remediation, TLS certificate renewal and installation, and change management processes. • Writing, maintaining and implementing network-security SOPs and technical documentation (required). • Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required). • Strong problem-solving, communication and organizational skills. • Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years. Preferred Qualifications • Experience supporting HHS or other federal civilian agency networks. • Current or recent federal Public Trust investigation. • CCNP, Palo Alto PCNSE, Zscaler or Cisco Client certifications. • NetScaler / Citrix Client exposure. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Requirements

Must-haves

Serve as a hands-on senior engineer on HRSA's enterprise network team, working with the technical lead, project managers and HRSA stakeholders.
Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
Configure and manage Cisco ASA / Firepower and Palo Alto (Panorama) firewalls, Cisco switches and remote access systems for secure, scalable operations.
Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (Client).
Troubleshoot complex network, VPN and authentication issues using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl.
Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
Perform Cisco switch and firewall software upgrades, vulnerability remediation and TLS certificate renewals during scheduled maintenance windows under change management.
Maintain network-security SOPs, network diagrams and technical documentation; support backup, recovery and federal and HHS policy compliance.
Support network upgrades, technology refresh and new-technology evaluations, and assist with hardware, software and vendor procurement.
Bachelor's degree or an equivalent combination of education and experience.
8+ years of network engineering experience in federal or enterprise-level IT environments.
Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (Client).
RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
Azure networking with network security groups (NSGs).
SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
Vulnerability remediation, TLS certificate renewal and installation, and change management processes.

Nice-to-haves

Experience supporting HHS or other federal civilian agency networks.
Current or recent federal Public Trust investigation.
CCNP, Palo Alto PCNSE, Zscaler or Cisco Client certifications.
NetScaler / Citrix Client exposure.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: jobdiva
Effort: medium