Network Engineer

Swift is a privately held, mission-driven and employee-focused services and solutions company headquartered in Reston, VA. Our capabilities include Software Development, Engineering & IT, Data Science, Cyber Enablement, Logistics, and Training. Founded in 2019, Swift supports Civilian, Defense, and Intelligence Community customers across the country and around the globe.

We're looking for a highly experienced Network Engineer to join our growing team. The ideal candidate is a well-rounded network professional who brings deep technical expertise across the full spectrum of enterprise networking — from core routing and switching to modern cloud-integrated, AI-ready infrastructure. This role demands someone who can architect, operate, and evolve complex networks in support of mission-critical government and intelligence community environments.

We have opportunities in Network Engineering in Herndon, VA; McLean; VA; and Chantilly; VA.

Responsibilities:

Network Architecture & Design: Design, implement, and manage enterprise and service-provider scale networks spanning LAN, WAN, data center, and cloud environments, ensuring reliability, scalability, and security at every layer.
Routing & Switching: Configure and optimize dynamic routing protocols (BGP, OSPF, EIGRP, IS-IS) and advanced switching technologies (STP, LACP, VTP, 802.1Q) across complex multi-site topologies.
Cloud & AI Infrastructure: Architect and operate Cisco Cloud & AI Infrastructure (CAI) solutions, including data center fabric, AI/ML networking, and high-performance compute connectivity; support integration of AI workload infrastructure into enterprise and hybrid cloud environments.
MPLS & Transport Services: Design and deliver MPLS/BGP transport services; manage integrations between service provider and customer environments.
Network Security: Enforce security controls including next-generation firewalls, VPNs (IPsec/SSL), ACLs, network segmentation, and Zero Trust architecture; collaborate closely with Cybersecurity teams on policy and compliance.
Cloud & Hybrid Networking: Architect and manage SD-WAN, SDN, and NFV solutions; design and support hybrid cloud networking across AWS, Azure, and/or GCP, including connectivity, routing, and security policy enforcement.
Automation & Infrastructure-as-Code: Automate network provisioning, configuration management, and validation using Ansible, Python, Terraform, and similar tools; integrate with CI/CD pipelines and infrastructure-as-code workflows.
Network Access Control: Deploy and manage NAC technologies (e.g., Cisco ISE) to enforce endpoint compliance and control access to sensitive network segments.
Network Management & Assurance: Administer enterprise network management platforms; leverage AI/ML-driven analytics, telemetry, and assurance tooling to proactively monitor performance, identify anomalies, and drive rapid issue resolution.
Operations & Incident Response: Serve as the Tier 3/4 escalation point for complex network incidents; conduct root cause analysis, capacity planning, lifecycle management, and performance tuning.
Documentation & Stakeholder Communication: Produce and maintain network designs, architecture diagrams, implementation plans, and change management documentation; deliver technical briefings to both technical and non-technical audiences.
Mentorship & Standards Development: Mentor junior engineers and contribute to organizational standards, engineering playbooks, and best practices.

Requirements:

BS in Computer Science, Information Technology, Network Engineering, or a related technical field, or equivalent professional experience
8+ years of hands-on experience designing, implementing, and operating enterprise-grade IP networks
Deep expertise in routing protocols (BGP, OSPF, EIGRP, IS-IS) and switching technologies (STP, LACP, VTP, 802.1Q)
Expertise with Cisco Cloud & AI Infrastructure (CAI), including data center networking, high-performance compute fabrics, and AI/ML workload connectivity
Proficiency with Cisco platforms across routing, switching, security (ASA/Firepower), and data center product lines; experience with additional vendors (Juniper, Palo Alto, Aruba) a plus
Experience designing and operating secure network architectures including firewall policy, VPN technologies, ACLs, and network segmentation
Hands-on experience with SD-WAN/SDN solutions and cloud networking (AWS, Azure, and/or GCP)
Demonstrated proficiency with network automation tools and scripting (Ansible, Python, or similar) and familiarity with infrastructure-as-code practices
Experience with NAC platforms (e.g., Cisco ISE, Aruba ClearPass) and endpoint access control policy enforcement
Ability to produce technical documentation, network diagrams, and architecture presentations for diverse audiences
US citizenship and an active TS/SCI with Polygraph security clearance required

Desired Experience:

Active CCNP, CCIE, JNCIE, or equivalent professional-level network engineering certification
Experience with Cisco data center technologies including Nexus switching, ACI, and UCS
Familiarity with AI/ML infrastructure networking requirements including high-throughput, low-latency fabric design and GPU cluster connectivity
Experience with MPLS transport services and inter-provider BGP peering
Background operating satellite, wireless, or tactical communications networks in support of government or military missions
Familiarity with VoIP/VTC infrastructure (SIP, H.323) and QoS engineering
Experience supporting system accreditation processes (RMF/ICD 503) and hardening networks to applicable security standards
Exposure to IPv6 design and dual-stack migration planning
Experience with network forensics, packet analysis (Wireshark, tcpdump), and incident response or intrusion analysis support
Experience operating large-scale, high-availability network environments in cleared government or IC contexts
Familiarity with DISA STIGs and DoD/IC network security compliance frameworks

Do you know anyone for this position, or other positions open at The Swift Group? We offer a $5,000 bonus for any referral candidate we hire, paid out at the new hire’s 90-day mark.

We are not working with outside staffing agencies to fill this position, and we will not be accepting unsolicited resumes. All inquiries must go through the recruiting team.

#LI-DI1

#Onsite

Network Engineer

Skills

About the Role

Similar Jobs