Network Engineer - Cisco- HHS STIM
Network Engineer IV – Routing & Switching Management (Key Personnel)
Job Overview
cFocus Software is seeking a highly skilled Network Engineer IV to support the Security Tools and Infrastructure Modernization (STIM) contract with the U.S. Department of Health and Human Services (HHS). The Network Engineer IV will provide enterprise-level expertise in the design, deployment, administration, and security of Cisco-based network infrastructure, ensuring availability, reliability, and compliance with federal cybersecurity standards. This role requires deep technical expertise in routing, switching, firewalls, VPNs, and network security, along with experience supporting federal SOC and compliance-driven environments.
Responsibilities
Design, configure, and manage enterprise LAN/WAN infrastructure, including routers, switches, firewalls, VPNs, and wireless networks.
Implement, configure, and support Cisco networking solutions with integration into Palo Alto firewalls.
Configure, deploy, manage, and troubleshoot IP telephony solutions using Cisco Unified Communications Manager (CUCM).
Manage and troubleshoot RADIUS, TACACS+, and 802.1X authentication using Cisco Identity Services Engine (ISE).
Participate in the planning, implementation, and execution of network solution projects aligned with strategic goals.
Evaluate and recommend emerging networking technologies to enhance efficiency and performance.
Monitor network performance, identify bottlenecks, optimize throughput, and enforce QoS policies.
Perform regular network maintenance (firmware updates, patching, hardware replacements).
Provide advanced technical support for outages and incidents; generate reports on performance and incidents.
Implement and manage network security measures (firewalls, IDS/IPS, encryption).
Conduct network vulnerability scans, security assessments, and penetration tests to mitigate risks.
Develop and enforce network security policies and procedures in line with CIS, NIST SP 800-53, and DISA STIGs.
Utilize scripting (Python, PowerShell), SIEM tools, and cloud security solutions to automate and enhance operations.
Support disaster recovery and business continuity planning for network infrastructure.
Collaborate with cross-functional IT teams to deliver secure infrastructure solutions.
Maintain detailed system documentation including designs, configs, SOPs, and security records.
Mentor junior engineers and provide technical leadership on complex network issues.
Stay current with emerging cyber threats, attack techniques, and mitigation tools.
Required Experience
10+ years of experience in enterprise network engineering and administration.
Proven expertise in Cisco routing and switching and integration with Palo Alto firewalls.
Experience supporting federal SOC operations and security compliance environments.
Proficiency in VPN, IDS/IPS, RADIUS, TACACS+, and 802.1X.
Hands-on experience with network monitoring, troubleshooting, and vulnerability scanning.
Familiarity with SIEM tools, cloud security platforms, and automation scripting (Python, PowerShell).
Strong analytical and problem-solving skills with ability to resolve complex networking issues.
Education & Certifications
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent combination of education and experience).
Must hold and maintain one or more of the following Cisco certifications (current or one version release previous):
Cisco Certified Network Associate (CCNA)
Cisco Certified Network Professional (CCNP)
Cisco Certified Internetwork Expert (CCIE) (preferred)
Clearance Requirement
Must be eligible to obtain and maintain a Public Trust (High-Risk, Level 5) clearance.