Network Engineer

Overview

The Network Engineer will provide advanced engineering and operational support to design, implement, and optimize enterprise network infrastructure in support of OIM internal services and SC mission systems. This role spans the full lifecycle of network systems, balancing high-level architecture and design responsibilities with day-to-day administration, troubleshooting, and device configuration.

The Network Engineer must apply industry best practices, SC-approved lifecycle methodologies, and DOE cybersecurity requirements to ensure resilient, scalable, and secure connectivity across cloud, on-premise, and hybrid environments.

Key Responsibilities

Network Infrastructure Management: Administer and maintain a multi-site enterprise network, including routers, switches, firewalls, VPNs, wireless infrastructure, and load balancing technologies.
• Architecture and Design: Develop scalable and resilient network architectures that support high availability, fault tolerance, and future growth, aligned with DOE enterprise IT strategy and security policies.
• Routing and Protocol Engineering: Engineer and support complex routing strategies using EIGRP, OSPF, and BGP; ensure optimal route redistribution, convergence, and path selection across hybrid connectivity models including DMVPN and MPLS.
• Firewall and Security Integration: Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, SSL decryption, policy optimization, IDS/IPS tuning, and integration with cloud and on-premises security architectures.
• Cloud and Hybrid Networking: Design, deploy, and manage hybrid network topologies within Microsoft Azure, including VNets, ExpressRoute, peering, NAT Gateway, and firewall solutions to ensure secure and performant cross-premise connectivity.
  Network Access Control (NAC): Support the implementation and management of NAC solutions such as Cisco ISE, with potential integration to Microsoft Intune for endpoint compliance and identity-based access control.
• Project Leadership: Lead infrastructure modernization initiatives, including planning, implementation, and validation of new networking technologies or re-architecture of existing environments.
• Monitoring and Performance Optimization: Utilize tools such as Cisco Catalyst Center, SolarWinds, and Azure Network Watcher to monitor availability, perform root cause analysis, and implement performance enhancements.
• Documentation and Standards Compliance: Maintain accurate technical documentation including topology diagrams, configuration baselines, IP address management, and change control records to support audit readiness and operational continuity.
• Cross-Functional Collaboration and Mentorship: Partner with adjacent IT disciplines-including cloud, systems, and security-to deliver integrated solutions; provide mentorship and technical leadership to junior staff.
• Serve as the primary interface between OIM and network engineering functions across SC.
• Conduct Alternatives Analysis (AA) and Cost-Benefit Analysis (CBA) for emerging network technologies, modernization projects, or proposed architectural changes.
• Provide engineering oversight for assigned network projects, ensuring timely coordination, risk mitigation, and issue escalation.
• Ensure consistent delivery of network engineering products aligned with SC lifecycle methodology, including forms, checklists, review templates, and acceptance documentation.
• Act as an escalation resource for advanced troubleshooting of complex network issues.
• Provide support during major outages or degraded services requiring increased coverage or coordination.
• Participate in scheduled patching, upgrades, and maintenance events, including planning and backstop coverage.
• Lead the evaluation of new and emerging network technologies for applicability to SC's enterprise environment.
• Provide subject matter expertise to OIM leadership in support of network architecture decisions, policy formulations, and modernization strategies.
• Drive innovation initiatives that enhance scalability, resilience, and security of SC's network infrastructure.

Required Qualifications

• Bachelor's degree in Information Technology or related field.
• Minimum of 7 years of relevant network engineering experience.
• US Citizen with the ability to obtain an agency clearance
• Certifications (Required):
  • Cisco CCNP (Routing & Switching or Enterprise)
  • Microsoft AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
  • Microsoft AZ-104: Azure Administrator

Technical Competencies

• Expert knowledge of TCP/IP, BGP, OSPF, DMVPN, DNS, and DHCP.
• Cisco routing/switching experience with Nexus 9K, Catalyst, ISR, and C8500 series.
• Strong Palo Alto firewall expertise including SSL decryption, HA configuration, and IPS tuning.
• Azure networking proficiency including ExpressRoute, NSGs, Virtual WAN, peering, and VPNs.
• Familiarity with Cisco ACI or willingness to rapidly train for deployment.
• Experience leading physical buildouts and Data Center Moves (rack layout, cabling, and infrastructure setup).

This position is required to be on-site in either Oak Ridge, TN / Germantown, MD / or Lamont, IL.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.