Network Engineer IV

Job not on LinkedIn

🔥 1 minute ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TalentWerx

WebsiteLinkedInAll Job Openings

11 - 50 employees

🎯 Recruiter

👥 HR Tech

🤝 B2B

Recruitment • HR Tech • B2B

TalentWerx is a forward-thinking recruitment firm focused on solving today's hiring challenges. The company emphasizes speed, accuracy, and innovation in delivering skilled candidates to fill vacancies rapidly. TalentWerx aims to provide a great experience for both clients and candidates by using unrivaled sourcing strategies to access elite talent. By partnering with TalentWerx, businesses can expect to save critical time and resources, benefiting from their precise and efficient hiring solutions.

📋 Description

• Design, implement, and maintain hybrid Azure Government network architecture and connectivity • Engineer resilient private connectivity using ExpressRoute, site-to-site VPN, redundant gateways, and network virtual appliances • Configure and troubleshoot BGP routing, route propagation, user-defined routes, gateway transit, route filtering, failover, and asymmetric routing • Design and administer Azure virtual networks, subnets, peering, route tables, NAT, load balancing, gateways, hub-and-spoke, and Virtual WAN patterns • Implement secure network segmentation and communication between functional environments • Design and maintain networks for the Cloud Upload & Staging service • Develop network architecture, authorization-boundary, trust-zone, data-flow, and interface-control documentation • Design and maintain NSGs, ASGs, Azure Firewall Policy rule collections, security-admin rules, and network-rule registers • Apply least-privilege and default-deny principles and review rules for obsolescence, duplication, shadowing, and excessive permissiveness • Implement Private Endpoint, Private Link, Azure Private DNS zones, DNS Private Resolver, DNS forwarding, and on-premises DNS integration • Validate routing, firewall policy, name resolution, and service reachability • Configure SIEM integrations and alerts for network health, firewall events, denied traffic, DNS failures, and abnormal traffic • Perform packet capture, next-hop analysis, effective-security-rule analysis, route validation, and end-to-end performance testing • Analyze bandwidth, throughput, latency, packet loss, and transfer performance for large engineering datasets • Develop network infrastructure as code and reusable IaC modules • Integrate network and security-rule changes with DevSecOps processes, source control, peer review, automated validation, testing, approval, deployment, rollback, and configuration-baseline management • Support NIST, DoD Cloud SRG, DISA STIG, RMF, and program-specific cybersecurity requirements • Produce and maintain RMF evidence and participate in technical reviews, change-control boards, assessments, remediation, incident response, and authorization-package development • Coordinate with cybersecurity, architecture, engineering, application, and assessment personnel • Develop implementation, maintenance, rollback, continuity, and disaster-recovery plans • Lead complex incident troubleshooting across Azure, on-premises infrastructure, identity, DNS, firewalls, routing, applications, and external connections • Evaluate network technologies and provide cost, performance, interoperability, security, authorization, and lifecycle recommendations • Support program operations, contractual deliverables, growth efforts, personal development activities, and stakeholder relationships

🎯 Requirements

• Active Secret clearance • Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field, or equivalent, with 8–10 years of relevant experience • Master's degree with 6–8 years of relevant experience is an alternative • Extensive experience designing, implementing, securing, and sustaining enterprise hybrid-cloud networks • Hands-on experience with Azure virtual networks, subnets, peering, route tables, NSGs, ASGs, Azure Firewall Policy, VPN Gateway, ExpressRoute, private endpoints, private DNS, and network monitoring • Strong knowledge of TCP/IP, BGP, IPsec, DNS, routing, switching, firewalls, NAT, network segmentation, load balancing, high availability, and hybrid name resolution • Experience developing network diagrams, traffic-flow documentation, firewall and security-group rule matrices, IP-address plans, implementation plans, rollback plans, and test procedures • Experience analyzing effective security rules and troubleshooting NSGs, Azure Firewall, routing, NAT, private endpoints, DNS, and hybrid connectivity • Experience implementing network and security-rule configurations through infrastructure as code, source control, peer review, and controlled deployment pipelines • Experience with enterprise and Azure-native monitoring, logging, performance analysis, and incident troubleshooting • Working knowledge of NIST SP 800-171, NIST SP 800-53, RMF, CMMC, DoD Cloud SRG, and applicable DISA STIG requirements • Effective leadership and communication skills for coordinating with technical and Government stakeholders • Preferred: Microsoft Azure, Cisco CCNP, or equivalent networking certifications • Preferred: Azure Government, DoD cloud impact-level, CUI, classified-network, Terraform, Bicep, PowerShell, Python, Azure CLI, Linux, Bash, Azure networking, network virtual appliance, RMF, defense, aerospace, or regulated-environment experience

🏖️ Benefits

• Health and wellness programs • Income protection • Paid leave • Retirement and savings • Flexible work arrangements supporting work-life balance • Competitive compensation • Learning and development opportunities