Network Engineer-Sr. at Amatriot Group, LLC in Chantilly, VA

Location: Chantilly, VA
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*: $100,000 - $146,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

Lead the design, implementation, and optimization of resilient, secure network infrastructure supporting mission-critical operations. Provide strategic and technical leadership in network modernization, security architecture, and performance optimization to ensure secure, reliable communications across complex, multi-enclave environments.

Key Responsibilities

Network Architecture and Modernization

• Design and implement enterprise network architectures supporting secure, mission-critical operations.
• Lead zero-trust network design initiatives and cross-enclave interoperability solutions.
• Drive network modernization aligned with enterprise strategy and zero-trust principles.
• Provide technical leadership for network infrastructure planning and implementation.

Network Performance and Resilience

• Optimize network performance, reliability, and security across complex, multi-enclave environments.
• Partner with security, architecture, and operations teams to maintain resilient network systems.

Security Architecture and Governance

• Establish and enforce network security architecture standards and governance processes.
• Ensure secure communications and connectivity across classified and highly regulated environments.

Qualifications

Education

• Bachelor’s degree. [Required]

Experience

• Minimum of 8 years of experience. [Required]
• Extensive experience designing and supporting enterprise network environments. [Required]
• Experience implementing zero-trust architectures and secure communications solutions. [Required]
• Experience supporting mission-critical, highly secure, or regulated environments. [Required]

Skills

• Strong expertise in routing, switching, firewalls, VPNs, network security, and access control technologies. [Required]
• Advanced troubleshooting and network performance analysis skills. [Required]
• Strong leadership, communication, and technical documentation skills. [Required]

Networking Requirements

• Cisco switching, routing, firewalling, and site-to-site functionality, such as IPsec, DMVPN, and SD-WAN.
• Arista switching.
• Tunneling and VPN technologies: GRE, IPsec, SSH, SSL, OpenVPN, WireGuard, and specialized multi-tiered applications.
• Virtual distributed switching using VMware, Proxmox, and Nutanix.
• Client-server VPNs, site-to-site VPNs, and ad hoc vendors or equipment.
• Advanced networking: multi-tiered.

Virtualization and Hyperconverged Infrastructure Requirements

• VMware / Broadcom: ESXi (vSphere), vCenter, vSAN, VxRail, cluster management, and licensing.
• Proxmox: host and cluster configuration and management, networking, and Ceph configuration and management.
• Nutanix: host and cluster configuration, management with Prism Central, and NDFS configuration and management.

Large Data Storage Requirements

• Hardware and vendors: QNAP, Synology, TrueNAS, and NetApp.
• File transport protocols: Samba, SSH, SFTP, and NFS.

Monitoring and Security Requirements

• Network-based and host-based collection and monitoring.
• Internal and external alerting, including SMTP configuration.
• Active vulnerability scanning, such as Nessus.
• Familiarity with Splunk for SIEM.

System Administration Requirements

• Operating systems: Linux, including Rocky, Red Hat, Amazon, and Ubuntu; Windows; and macOS.
• Identity and access management: IPA / FreeIPA, LDAP / OpenLDAP, Keycloak, and Linux-based SSSD host-based access control (HBAC).

Application Requirements

• Splunk, Nginx, Confluence, Jira, Docker, Kubernetes, GitLab, and Jupyter.

Preferred Qualifications

• Master’s degree in Information Technology, Network Engineering, Cybersecurity, or a related field.
• Experience supporting federal, defense, intelligence, or classified network environments.
• Expertise with multi-enclave or cross-domain network architectures.
• Experience with cloud networking, software-defined networking (SDN), and hybrid cloud environments.
• Knowledge of security accreditation processes and compliance frameworks.
• Relevant certifications such as CCNP, CCIE, CISSP, JNCIP, JNCIE, AWS Advanced Networking, or equivalent.

Note: The overview refers to an SME, while the header says “Network Engineer”; the header is retained. The field for the required 8 years of experience is unspecified, and “Advanced