Network Infrastructure Engineer (Secret Clearance)

Zachary Piper Solutions is seekinga Network Infrastructure Engineer to support a critical DoD network for Army Edge Computing Capability near Radford, VA. The team is seeking an individual with senior level capabilities implementing IT infrastructure systems, with a focus on network infrastructure in enterprise environments.

Clearance: Secret clearance

Location: Radford, VA (100% onsite)

This job opens for applications on 11/21/2025. Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the Network Engineer:

· Collaborate with government engineers to design, implement, and maintain the AECC architecture.

· Create, deploy, and manage Infrastructure as Code (IaC) to support the deployment and ongoing maintenance of the AECC network architecture.

· Use IaC to provision the network foundation for customer enclaves as applications are hosted on the AECC platform.

· Perform daily network administration, including patching and upgrading all network components.

· Monitor network health and resource utilization, and promptly alert the AECC lead when critical issues occur or additional resources are needed.

· Apply hardening measures to the network in alignment with industry best practices and mandated government cybersecurity standards.

· Diagnose and resolve hosting platform network issues through troubleshooting and root cause analysis.

· Develop and maintain comprehensive documentation for systems, infrastructure, and processes, including diagrams, network topology, configurations, and standard operating procedures.

· Provide on-call support for triaging and resolving after-hours production incidents.

· Recommend enhancements to security, scalability, manageability, and performance across AECC network enclaves.

Qualifications of the Network Engineer:

· Secret clearance required

· Bachelors degree and 5+ years of network infrastructure implementation experience

· IAT II certification (Sec+, CYSA+, etc.), CCNA preferred

· Demonstrated expertise in VMware NSX, including design, deployment, and management.

· Proficiency in network engineering, including LAN/WAN, routing, switching, and network security.

· Proficiency with core AECC networking components: NSX, Palo Alto Firewalls, Cisco Routers, Cisco Nexus & Catalyst switches

· Familiarity with the VMware Suite of products: NSX, VSAN, vSphere, ESXi, ARIA, and other VMware tools.

· Ability to troubleshoot complex issues related to VMware infrastructure and network configurations.

· Experience with network automation tools (e.g., Ansible, Terraform) and scripting languages (Python, PowerShell, etc.).

· Strong knowledge of TCP/IP, BGP, OSPF, VLANs, and MPLS.

· Strong automation and Infrastructure as Code (IaC) skills.

· Strong verbal and written communication skills.

· Strong troubleshooting skills across the entire technology stack - network, storage, server, and applications.

Compensation of the Network Engineer:

• Total compensation based on experience level - $130,000-$175,000+ **based on years of experience and degree level**
• Full Benefits: PTO, 11 Paid Holidays, Sick leave as required by state law, Cigna Medical, Dental, and Vision, 401k with ADP
• Certification reimbursement
• Contract mobility and job stability through Zachary Piper Solutions

Keywords: network security, firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), VPN, encryption, SSL/TLS, PKI, access control, identity and access management (IAM), zero trust architecture, vulnerability management, penetration testing, threat analysis, SIEM (Security Information and Event Management), incident response, active directory, group policy, cloud, cisco, juniper, brocade, nexus, VSAN, NSX, infrastructure, network engineer, network architect, network security, risk assessment, compliance, NIST, ISO 27001, cybersecurity frameworks, network monitoring, packet analysis, TCP/IP, DNS security, cloud security, Infrastructure as Code (IaC), automation, DevSecOps, security hardening, patch management, secure configurations, security policies, disaster recovery, business continuity, security audits, logging, forensics, malware analysis, endpoint protection, multi-factor authentication (MFA), secure protocols, data loss prevention (DLP), security orchestration, container security, microsegmentation, network segmentation, security best practices, VMWARE, Virtualization, virtual machine, secret, top secret, topsecret, ts/sci, sec+, IAT II, CCNA, DoD, Army, Federal, hiring, opentowork, private, onsite, on-site, CCNP, VLAN, BGP, OSPF, MPLS.