Job description
Job Title: Senior Network Engineer
Location: Oak Ridge, TN
Employment Type: Full-Time
Job Summary:
The Senior Network Engineer is a hybrid operations and engineering role responsible for the design, modernization, and support of the Department of Energy (DOE) Office of Science’s network infrastructure. This position plays a pivotal role in maintaining secure, high-performance connectivity and spearheading infrastructure initiatives such as core network redesign, cloud integration, security architectures, and federal compliance alignment.
Based in Oak Ridge, TN, this role demands a seasoned network professional who combines deep technical expertise with leadership in enterprise-scale projects. The ideal candidate excels at both tactical configuration work and high-level architecture, particularly in hybrid on-prem/cloud environments.
Key Responsibilities:
Hybrid Engineering and Administration
Balance day-to-day operational support with high-level engineering design for DOE enterprise environments.
Provide configuration, troubleshooting, and lifecycle management across routers, switches, firewalls, wireless infrastructure, VPNs, and load balancers.
Architecture and Design
Develop scalable and resilient network architectures supporting high availability, fault tolerance, growth, and alignment with DOE’s IT and security strategies.
Lead the design and implementation of core network modernization, cloud connectivity, and security segmentation initiatives.
Advanced Routing and Connectivity
Engineer and support complex routing strategies including EIGRP, OSPF, BGP, DMVPN, and MPLS protocols
Ensure route optimization, efficient redistribution, and robust hybrid WAN pathing strategies.
Cloud & Hybrid Networking
Architect and maintain networking for Microsoft Azure, including:
VNets, ExpressRoute, Peering, Virtual WAN
Azure Firewall, NAT Gateway, Private Link, and Front Door
Ensure secure and performant connectivity between on-prem and cloud workloads.
Firewall & Security Architecture
Deploy and manage next-generation firewall platforms (e.g., Palo Alto), including:
SSL decryption, high availability (HA), IPS/IDS, and threat mitigation
Integration with on-prem and Azure-native security tools
Network Access Control & Compliance
Implement and support Cisco Identity Services Engine (ISE) and potential integration with Microsoft Intune for identity-based access control.
Ensure alignment with federal compliance standards (e.g., NIST, FISMA).
Infrastructure Modernization & Leadership
Lead major network infrastructure projects such as data center moves, physical buildouts, and cloud migrations.
Provide technical leadership across multidisciplinary teams and mentor junior engineers.
Monitoring, Optimization & Documentation
Utilize tools like Cisco Catalyst Center (DNA Center), SolarWinds, and Azure Network Watcher to monitor health, performance, and availability.
Maintain detailed documentation: network topologies, IPAM records, configuration baselines, and change logs.
Required Qualifications:
Bachelor’s degree in Information Technology, Electrical Engineering, Computer Engineering, Computer Science, or a related field.
Minimum 7 years of hands-on experience in enterprise network engineering.
Certifications (Required)
Cisco CCNP (Routing & Switching or Enterprise)
Microsoft AZ-700: Designing and Implementing Azure Networking Solutions
Microsoft AZ-104: Azure Administrator
Technical Skills
Deep expertise in:
TCP/IP, BGP, OSPF, DMVPN, DNS, DHCP
Cisco Nexus 9K, Catalyst series, ISR, C8500 routers
Palo Alto Firewalls – SSL Decryption, IPS tuning, HA
Azure network services: ExpressRoute, NSGs, vWAN, VPNs
Familiarity with Cisco ACI, or willingness to learn rapidly.
Experience with PowerShell or Python for automation and configuration deployment.
Experience with infrastructure-as-code and version control.
Proven track record managing data center migrations, including rack layout, cable planning, and structured cabling.
Preferred Qualifications
CCIE, PCNSE, or additional Azure network/security certifications.
Experience with:
Cisco ISE, DNA Center, and SD-WAN deployments
Azure-native services like Front Door, WAF, Private Link
Prior experience working in federal environments or as an IT contractor for DOE or similar agencies.
Leadership in large-scale, cross-domain infrastructure projects.
Work Authorization: U.S. Citizenship required due to federal contract requirements.
Working Conditions: This position is primarily performed in an office environment or a home office setting. Employees will be required to use a computer and other office equipment for extended periods.
What We Offer:
Management Solutions offers a comprehensive benefits package including: Medical, Rx, Dental and Vision Insurance, company paid short-term disability and life insurance, 401k plan with up to a 5% match with immediate vesting, Flexible Spending Accounts, PTO, paid holidays, and more!
Management Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. We encourage applications from individuals of all backgrounds and experiences.
Disclaimer:
This job description is intended to convey information essential to understanding the scope of the position and is not a complete list of skills, efforts, duties, responsibilities or working conditions associated with it.
Management Solutions LLC is an Equal Employment Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
