Network Engineer

What Impact You'll Have

The Sponsor supports a diverse set of corporate goals across the organization by conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies. The Sponsor requires subject matter expertise in technical risk analysis of IT systems and networks, mobile and wireless networks, cloud-based computing, network management platforms, communication protocols, scripting or programming products, configuration scripts, and IT hardware and software products in support of Sponsor's risk assessment activities. The Sponsor also requires software development to maintain an online infrastructure, evaluating and extracting relevant data, web development, and software coding. Work Requirements for Network Engineering: The Contractor shall manage security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement. The Contractor shall ensure network and endpoint systems are secure, efficient, and compliant. The Contractor shall manage Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations. The Contractor shall configure OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment. The Contractor shall segment networks using VLANs and Access Control Lists in a Zero Trust model. The Contractor shall implement network segmentation strategies to enhance security and minimize the attack surface. The Contractor shall oversee endpoint provisioning, patching, and hardening via ManageEngine, to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up to date. The Contractor shall administer Windows 11, Linux, and BlueStacks. The Contractor shall manage and support endpoint operating systems and Android emulators to ensure they meet performance and security standards. The Contractor shall enforce GPOs and AD-integrated access controls. The Contractor shall implement and manage Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions. The Contractor shall develop and deploy automation scripts to streamline policy enforcement and system management tasks. Work Requirements for Systems Engineering and Architecture: The Contractor shall design, deploy, and optimize a VMware Horizon-based VDI environment using vSphere and Cisco HyperFlex, including Android emulation, golden image management, and GPU virtualization, to ensure a secure, scalable, and high-performance virtual desktop infrastructure. The Contractor shall architect and maintain a scalable, secure VMware Horizon-based VDI platform. The Contractor shall manage and optimize Cisco HyperFlex hyperconverged infrastructure, including compute, storage, and network stack, to support the VDI environment. The Contractor shall design, optimize, and manage golden images for Windows 11 and Linux. The Contractor shall create and maintain standardized images for virtual desktops, ensuring they are optimized for performance and security. The Contractor shall implement GPU virtualization to enhance the performance of Android emulators used within the VDI environment. The Contractor shall implement automation workflows for desktop deployment and updates. The Contractor shall develop and deploy automation scripts and workflows to streamline the provisioning and updating of virtual desktops.

What You'll be Owning

GRVTY is seeking a Network Engineer with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Chantilly, VA.

What You Must Have

• Active TS/SCI with Polygraph Clearance
• Demonstrated hands on experience with firewall administration, Network Access Control, and Access Controls.
• Demonstrated experience with VPN tunneling.
• Demonstrated experience with endpoint security and mobile emulation environments.
• Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.

What Would be Nice to Have

• Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+.
• Demonstrated experience collaborating with cybersecurity and VDI teams, Sponsor or otherwise.
• Demonstrated experience providing training and support.
• Demonstrated experience developing and maintaining network and endpoint security policies and procedures.
• Demonstrated experience conducting regular security assessments.
• Demonstrated experience implementing Zero Trust security model.

Virginia Pay Range

$150,000-$250,000