SME Network Engineer

Location: Lorton, Virginia, United States; hybrid schedule with up to 2 telework days per week and 3 onsite days required. Occasional CONUS travel and local travel within 50 miles may be required. U.S. citizenship is required, and candidates must be able to obtain and maintain DHS Public Trust.

Salary: $130,000–$160,000 per year, depending on experience.

Company

hirify.global delivers technology solutions and mission support for federal agencies across civilian, health, and national security environments, with capabilities in AI/ML, cloud, cybersecurity, and IT modernization.

What you will do

• Design, document, and maintain enterprise Layer 2/Layer 3 network architecture, routing, IP plans, VLAN/VRF segmentation, firewall zones, VPN paths, and COOP/DR failover routes.
• Diagnose and resolve enterprise network outages using packet captures, flow analysis, monitoring data, and log correlation.
• Engineer firewall policies, security segmentation, VPN and PKI integrations, hardening activities, vulnerability remediation, and IA/ATO documentation.
• Lead network upgrades, configuration changes, maintenance, performance tuning, and post-change end-to-end validation.
• Coordinate network dependencies across Active Directory, DNS/DHCP, VMware, SAN/storage, applications, systems, virtualization, and field engineering.
• Support COOP/DR planning and testing, lab environments, technical documentation, field operations, and DHS mission readiness.

Requirements

• 10+ years of enterprise network engineering experience with increasing responsibility.
• Bachelor’s degree in IT, Engineering, or a related field, or 5+ additional years of equivalent experience.
• Hands-on experience with Cisco routing and switching, including 3000–9000 platforms, and Palo Alto or Fortinet firewalls.
• Experience with VPN architecture, IPsec tunneling, PKI integration, VLANs, VRFs, security zones, packet analysis, and network monitoring tools.
• Ability to create network diagrams and architecture documentation from device configurations, logs, and analysis, and to understand DNS, Active Directory, VMware networking, and SAN connectivity.
• Must be a U.S. citizen, able to obtain and maintain DHS Public Trust, and able to work three days onsite in Lorton each week.

Nice to have

• CCNA, CCNP Enterprise, CCNP Security, PCNSE, Fortinet NSE4/NSE5, or CCIE-level expertise.
• Experience supporting federal law enforcement IT systems or mission operations.
• COOP/DR architecture, failover site execution, VPN transitions, network segmentation, and multi-site resiliency experience.
• Familiarity with Kubernetes/container environments and 24/7 high-availability operations.

Culture & Benefits

• Full-time schedule with 8-hour workdays and on-call support as needed.
• Hybrid work with teleworking options, paid holidays, PTO, and paid parental leave.
• Medical insurance, including HSA-eligible plans, plus employer-paid dental, vision, short-term disability, long-term disability, and life insurance options.
• 5% 401(k) company matching and professional development opportunities.
• Team events, recognition programs, and a family-focused work environment.