Senior CMMC Network Engineer

This is a fully remote position, open to applicants in Oregon.

📋 Description

• Design, develop, and sustain enterprise LAN/WAN/WLAN infrastructure in compliance with CMMC/NIST 800-171 standards.

• Lead the implementation of Cisco SD-Access, which includes managing DNA Center for wired/wireless fabric, SGT/TrustSec segmentation, and enforcing CUI boundary protocols.

• Oversee and enhance routing and switching environments, encompassing SD-WAN, BGP, OSPF, EIGRP, VLANs, STP, and HSRP/VRRP.

• Configure and maintain firewalls, VPNs, and network security measures to uphold CUI boundary segmentation.

• Develop and uphold CUI enclave architecture incorporating access controls, encryption during transit, and audit logging.

• Spearhead network upgrades, migrations, and infrastructure initiatives.

• Diagnose network performance challenges and outages while conducting root cause analysis.

• Monitor network health utilizing tools such as SolarWinds, ThousandEyes, or equivalent.

• Maintain network diagrams, IP schemas, standards, runbooks, and SSP network documentation.

• Assist in CMMC self-assessment or C3PAO assessment processes by providing network evidence, diagrams, and control narratives.

• Collaborate with service providers on circuit activations, troubleshooting, and escalations.

• Ensure sustained high availability, redundancy, and preparedness for disaster recovery.

• Mentor junior engineers and offer technical support and guidance.

• Participate in on-call rotations and after-hours maintenance activities.

• Design and maintain cloud network architecture for AWS and Azure.

• Establish secure hybrid connectivity through IPsec site-to-site VPN, AWS Direct Connect, and Azure ExpressRoute.

• Implement cloud segmentation and secure routing for CUI workloads.

• Assist in cloud security integrations for centralized logging, monitoring, traffic visibility, and alerting in alignment with NIST 800-171.

• Collaborate with cloud engineering and compliance/GRC teams to ensure compliant CUI connectivity.

⛳️ Requirements

• Bachelor’s degree in IT/Computer Science or equivalent experience.

• 7+ years of practical experience in enterprise network engineering.

• Proven experience in supporting a network environment that adheres to CMMC/NIST 800-171/DFARS 252.204-7012 requirements—either through implementation or assessment support, rather than mere familiarity.

• In-depth knowledge of routing and switching (Cisco); TCP/IP, subnetting, DNS, DHCP, InfoBlox; WAN technologies (DMVPN, SD-WAN, DIA, broadband); and wireless networking (Cisco/Meraki).

• Experience with firewalls (Palo Alto/Cisco ASA/FTD), VPN (site-to-site, remote access), and network segmentation for regulated/CUI environments.

• Strong troubleshooting capabilities using packet capture tools (Wireshark/tcpdump).

• Familiarity with contributing to or supporting SSP, POA&M, or CMMC assessment documentation.

• Excellent communication and stakeholder management abilities.

• Preferred: CMMC RP, CCP, or CCA credential (or actively pursuing).

• Preferred: CCNP / CCIE (Enterprise or Security).

• Preferred: PCNSE / NSE certifications.

• Preferred: Experience with SD-WAN (Viptela, etc.).

• Preferred: Experience in automation (Python, Ansible, Terraform, API-based networking).

• Preferred: NAC experience (Cisco ISE, ClearPass).

• Preferred: Prior experience on a DoD/federal contractor network supporting an active CMMC assessment cycle.

🏝️ Benefits

• Comprehensive health insurance plans.

• Competitive salary and performance bonuses.

• Opportunities for professional development and certifications.

• Flexible work schedules and remote work options.

• Generous paid time off and holiday policies.