Senior Network Engineer

About DMI DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com About the Opportunity DMI is seeking a Senior Network Engineer to serve as the senior technical authority for secure network architecture and operations at a federal agency client. In this role, you will design, implement, and continuously improve a Cisco-based enterprise network in alignment with Zero Trust principles, NIST cybersecurity standards, and federal compliance requirements — providing technical leadership across engineering, security, and operations teams. Duties and Responsibilities: - Design, implement, operate, and optimize Cisco-based network infrastructure, including core, distribution, access, and edge layers for high availability, scalability, and mission resilience - Implement and maintain network security architecture aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and Cisco security best practices - Engineer and enforce Zero Trust network principles, including network segmentation, micro-segmentation, and continuous verification of users and devices - Design and implement least-privilege network access controls with role-based and identity-aware access mechanisms, including 802.1X - Configure and maintain centralized logging, SIEM integration, and NDR tool connectivity to enhance threat detection and incident response readiness - Conduct continuous monitoring and vulnerability assessments; coordinate remediation in alignment with NIST RMF - Secure perimeter and public-facing assets through ingress/egress filtering, firewall rule optimization, and MFA for administrative access - Lead security assessments, audits, and compliance reviews; continuously evaluate and enhance network security posture through emerging best practices - Serve as senior technical advisor to stakeholders; collaborate with cybersecurity, cloud, and operations teams to resolve complex issues and improve architecture - Support incident response with network-level analysis, containment actions, and forensic data collection Qualifications Education and Years of Experience: - Bachelor's degree in Computer Science, Information Technology, or a related field; relevant experience and Cisco certifications may be considered in lieu of a degree. - Professional certifications in network engineering or cybersecurity, maintained continuously for a minimum of 5 years - Experience designing and implementing NIST SP 800-53 and NIST SP 800-207 Zero Trust network architectures in enterprise environments - Expert-level proficiency with Cisco routing, switching, and firewall platforms; advanced experience with VLANs, DNS, DHCP, and VPNs - Experience in engineering and managing 802.1X network access control and identity-aware network security - Experience configuring centralized logging and integrating with enterprise SIEM and NDR platforms - Experience leading or participating in security assessments, audits, and compliance reviews - Cisco CCNP or CCIE (or equivalent) certification - 7+ years of enterprise network engineering experience, including at least 3 years in a senior or lead engineering role Required Skills & Certifications: - Experience integrating SIEM and NDR platforms for real-time threat detection and alerting ^ - Experience supporting or leading incident response operations - Prior experience in a federal government network engineering environment Background Requirements: Must possess or be eligible to obtain and complete a Public Trust background investigation and/o