Senior Cisco Network Engineer

Job Description
BAE Systems seeks a senior-level Cisco Network engineer possessing four (8) plus years of recent, contiguous years of hands-on experience designing, installing, configuring, and troubleshooting system network environments on large scale enterprise integrations. Possesses and applies a comprehensive knowledge across key tasks and high impact assignments. Plans and leads major technology assignments. Evaluates performance results and recommends major changes affecting short-term project growth and success. Functions as a technical expert across multiple project assignments.

The primary scope of duties for the senior Cisco/Nexus Network engineer shall include assisting the senior lead Network engineer with requirements capturing, detailed designing, installing and configuring, system and security testing, and implementing various LAN and WAN task orders to an enterprise's large scale Cisco/Nexus and MDS-specific network switches.

Additional duties for which the candidate shall demonstrate experience for the senior Cisco/Nexus Network engineer position shall include:

• Developing network system model and network system architecture diagrams;
• Participating in both project and steady-state meetings;
• Providing Tier 3 level support via change control processes and procedures;
• Contributing subject matter expertise to improve-upon the enterprise's networks as required;
• Monitoring of LAN infrastructure activity and performance for identifying potential security, speed, and performance utilizing LAN, QoS, VLAN, IOS, Netflow and SNMP, Solarwind's Orion, and/or OPNET Ace Live technologies;
• Developing/creating of system model and system architecture plans and designs, test plans, implementation plans, operation guides, and overall subject matter expertise for enterprise network solutions;
• Utilizing available network troubleshooting tools, including network packet captures, monitoring devices, log files, and customer input in order to facilitate effective issues resolution.
• Able to troubleshoot Software Defined LANs, 802.1x, IPv6, Zscaler.

Troubleshooting Kemp Load Balancers

• Analyze and interpret Kemp LoadMaster logs, statistics, and configuration settings to identify misconfigurations, health check failures, or resource bottlenecks.
• Validate virtual service configurations, including VIPs, L7 content switching rules, and persistence settings.
• Troubleshoot backend server health and connectivity issues as reported by the load balancer.
• Identify and resolve issues related to SSL offloading, re-encryption, and certificate management on the Kemp appliance.

Troubleshooting Network Switches

• Utilize CLI commands to verify VLAN assignments, trunking configurations, and port status for devices connected to the application's network path.
• Analyze switch logs and error counters to identify potential physical layer issues, spanning tree protocol (STP) loops, or port-level errors.
• Perform diagnostic tests such as link tests and port diagnostics to ensure proper network connectivity.
• Verify Access Control List (ACL) rules and their impact on application traffic flow.

Packet Capture on Network Devices

• Perform targeted packet captures on network devices (e.g., switches or routers) using tools like Wireshark, TShark or embedded device capture capabilities. Able to review logs to pinpoint the issue.
• Filter captured data to focus on specific IP addresses, ports, or protocols relevant to the application issue.
• Analyze captured traffic to identify TCP handshake failures, retransmissions, out-of-order packets, or application-layer errors.
• Generate summary reports and detailed findings based on the packet capture analysis.

Packet Tracing on Windows Workstation Environments

• Conduct real-time network packet traces on Windows 10/11 workstations using Wireshark or Microsoft Message Analyzer.
• Analyze client-side network behavior to pinpoint issues such as DNS resolution failures, proxy server problems, or application-specific errors.
• Identify and document any client-side firewall or antivirus software impacting network communication.
• Provide clear and concise documentation of the trace findings and their implications.

Packet Tracing on Windows Server Environments

• Capture network traffic on Windows Server operating systems (e.g., 2019, 2022, 2025) to diagnose server-side application issues.
• Isolate and analyze traffic patterns to and from the server, including database connections, API calls, and inter-service communication.
• Identify and troubleshoot any issues related to server-side firewalls, Network Interface Card (NIC) teaming, or host-based routing.
• Produce a final report detailing the server-side analysis and recommended corrective actions
• Provided proper documentation to maintain accountability and priority of installation during the migration. Ensured proper documentation was delivered to Change Management team, Incident Mgmt, and the Asset Management team.
• Analyze, setup, monitor, and audit required measures to ensure data network performance and security.
• Provide peer review to other network engineers to validate proposed configurations and designs

Period of Performance: Present date through September 30, 2026
Place of Performance:

• 175 N St. NE, Washington, DC 20530, OR
• 1600 Hampton St, Columbia, SC 29208

Work Hours:

• Monday through Friday
• Possible remote work 4 days a week based on government requirements
• 8.5 hour shift spanning the operational hours of 7:00am to 6:00pm.
• Core business hours from 9am to 3:00pm.
• Government closings/holidays excluded.

Travel: None to minimal travel anticipated.

Background / Project Description:
The Executive Office for United States Attorneys (EOUSA) within the Department of Justice deploys and maintains mission-critical technical projects encompassing administrative, technical, and legal support to all 94 US Attorney offices located in over 250 geographically dispersed sites throughout the continental United States and its territories. The EOUSA Office Automation's (OA) General Integration (GI) staff provides the technical project management, technical systems and network engineering, and Tier 3 level support for the EOUSA following the SDLC by capturing requirements, designing, installing, configuring, testing, and implementing complex technical solutions for office automation, wide and local area networking, case management, and other applications as it relates to the EOUSA and USAO agencies.

Required Education, Experience, & Skills
Required Knowledge and Experience :

• (8) plus years of recent, contiguous years of hands-on experience designing, installing, configuring, and troubleshooting system network environments on large scale enterprise integrations;
• Designing, installing, configuring, and troubleshooting of Cisco Nexus switching and routing systems;
• Experience with configuring load balancers such as F5 and Kemp
• Utilizing Cisco IOS commands and VLAN (switches & routers) configuring;
• Troubleshooting of WAN Accelerators such as Cisco WaaS products;
• Diagramming network designs, layouts, etc. using tools such as Visio;
• Performing work without appreciable direction and exercising considerable latitude in the determination of technical objectives of assignments.

Security Requirements:

• U.S. Citizenship
• Eligible Level 6 Public Trust (SF85P and Credit (NACI BI))

Preferred Education, Experience, & Skills
Supplemental/Preferred Additional Qualifications/Experience :

• Designing, installing, configuring, and troubleshooting of Cisco MDS switching and routing systems;
• Policy making and management for Layer 3 QoS packet markings and conformance;

Pay Information
Full-Time Salary Range: $94728 - $161038

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.

Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.

This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.