SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.
SkyePoint Decisions is seeking a Network Engineer to support a Department of State (DOS) customer. This position primarily supports operations and maintenance of foreign post network integrations with the DoS Core and other network integrations comprising a large and complex network infrastructure and cloud environments, with engineering and design responsibilities as warranted.
This role offers a hybrid schedule (~3 days onsite) at the discretion of the customer. The role can be located in Beltsville, MD or Springfield, VA.
Responsibilities:
- Performs day-to-day operations and maintenance of network, cloud infrastructure, and voice components and systems across the enterprise.
- Monitors, tunes, sets standards, and maintains a range of network and cloud infrastructure to ensure optimal performance and availability.
- Uses monitoring, performance analysis, network management, software and hardware equipment to troubleshoot and isolate problems; gauge performance and activity across on-premises and cloud environments.
- Performs problem isolation and resolution for network incidents and service requests in support of global operations.
- Evaluates, designs, and documents network solutions as warranted to address operational requirements and customer needs.
- Works with Architects and engineering teams to design and implement solutions to operational problems within the capacity and operational limitations of installed equipment and cloud services.
- Develops and maintains contingency plans for network related hardware failures including isolated and major outages and cloud service disruptions.
- Provides internal consulting, technical guidance, information and support to application developers, computer operations, management, and departmental clients.
- Provides client consulting and training on the operation and use of network systems and cloud architectures.
- Plans, researches, evaluates and recommends new network equipment, cloud services, and related technologies – hardware and software.
- Designs and implements hybrid cloud network architectures integrating on-premises infrastructure with cloud platforms (AWS, Azure, Google Cloud) as needed.
- Configures and manages cloud networking components including virtual networks, subnets, security groups, load balancers, and cloud-native connectivity solutions.
- Implements and maintains secure connectivity between on-premises data centers and cloud environments using VPNs, Direct Connect, ExpressRoute, or similar technologies.
Required Qualifications:
- Bachelor's degree in a network engineering/computer engineering related discipline and 10+ years IT network engineering and architecture experience (Tier III and above, network infrastructure design and implementation) with large, complex networks and cloud environments; Masters and 8+ years of related experience; may accept additional experience in lieu of degree.
- Expertise in operating, maintaining, and supporting scalable, secure, and high-performance enterprise network architectures, including LAN, WAN, SDWAN, and cloud-based solutions.
- Cisco CCNA and/or CCNP and/or CCIE.
- Strong/Deep knowledge of Layer2/Layer3, routing and switching, tunneling, and networking protocols: BGP, OSPF, EIGRP, static, L2TP, IPSEC, VPN, DMVPN, GRE Spanning tree, etherchannel, vlan trunking, 802.1q, HSRP, VRRP, GLBP, VPC, MPLS, and VLANs, as well as experience with enterprise-grade routers and switches.
- Deep knowledge of Cisco switching and routing product lines.
- Proficiency in implementing and maintaining security measures, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and zero-trust architectures across on-premises and cloud environments.
- Strong experience in operations, support, and troubleshooting of large/complex networks end-to-end including hybrid cloud architectures.
- Experience operating and maintaining cloud network architectures in AWS, Azure, or Google Cloud Platform.
- Knowledge of cloud networking services such as AWS VPC, Azure Virtual Network, Transit Gateway, Cloud Interconnect, and related technologies.
- Must be a U.S. citizen.
- Active interim Secret clearance with the ability to obtain a Top Secret clearance.
Preferred Qualifications:
- Low Earth Orbit Satellite design including Starshield design and implementations.
- Firsthand experience in developing and providing quality assurance review of engineering change orders relating to the replacement or enhancement of perimeter security hardware and software.
- Experienced with performing root cause analysis, risk identification, and risk mitigation.
- Expert Knowledge of cabling standards, fiber optic and copper cable termination.
- Understanding of cutting-edge technologies such as SDN (Software-Defined Networking), IoT (Internet of Things), 5G, and cloud-native networking.
- Expert experience in one or more of the following: Unclassified Voice Systems, Secure Voice Systems to include red switch, TDM Switching, Voice Over IP (VOIP).
- Experience supporting the government customers in secure environments, familiarity of NIPRNET and SIPRNET operating standards and applicable guidelines.
- DNS / Infoblox experience.
- Industry-recognized certifications such as CCIE (Cisco Certified Internetwork Expert), CCNP (Cisco Certified Network Professional), CCDP, JDCI, CCVP, AWS Certified Advanced Networking, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, or similar cloud networking certifications.
- Familiarity with automation tools and scripting languages (e.g., Python, Ansible, Terraform, CloudFormation) to streamline network operations and reduce manual tasks in both on-premises and cloud environments.
- Expertise in network performance monitoring tools (e.g., NeuralStar, SolarWinds, Nagios, NetFlow, CloudWatch, Azure Monitor) and advanced troubleshooting techniques.
- Experience with Infrastructure as Code (IaC) tools for cloud network deployment and management.
- Knowledge of cloud security best practices, including network segmentation, encryption in transit, and cloud-native security services.
- Experience with multi-cloud and hybrid cloud architectures and connectivity solutions.
- Familiarity with DoS environment (data and voice networks, IT security systems, policies and procedures), Foreign Affairs Handbooks (FAHs), Foreign Affairs Manuals (FAMs).
- Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent presentation skills.
Compensation:
Salary Range: TBD
The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.
Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.
In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.
What We Can Offer You:
- At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
- Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
- Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
- Flexible Work Environment
SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.
SkyePoint Decisions is a participating E-Verify Employer.
U.S. Citizenship is required for most positions.
Equal Opportunity Employer/Veterans/Disabled.
CCPA Disclosure Notice Here
Skills Required
- Bachelor’s degree in network engineering, computer engineering, or a related discipline, plus 10+ years of IT network engineering and architecture experience; alternatively, a master’s degree with 8+ years of experience or equivalent additional experience in lieu of degree.
- Experience with Tier III or higher network infrastructure design and implementation in large, complex networks and cloud environments.
- Expertise operating, maintaining, and supporting scalable enterprise LAN, WAN, SD-WAN, and cloud network architectures.
- Cisco CCNA, CCNP, and/or CCIE certification.
- Strong knowledge of Layer 2/Layer 3 networking, routing, switching, tunneling, BGP, OSPF, EIGRP, VPN, DMVPN, GRE, VLANs, MPLS, and related protocols.
- Deep knowledge of Cisco switching and routing product lines.
- Experience implementing and maintaining firewalls, VPNs, IDS/IPS, and zero-trust architectures.
- Experience troubleshooting large and complex networks end-to-end, including hybrid cloud architectures.
- Experience operating and maintaining cloud network architectures in AWS, Azure, or Google Cloud Platform.
- Knowledge of cloud networking services including AWS VPC, Azure Virtual Network, Transit Gateway, and Cloud Interconnect.
- U.S. citizenship.
- Active interim Secret clearance with the ability to obtain a Top Secret clearance.
- Low Earth Orbit satellite and Starshield design and implementation experience.
- Experience reviewing engineering change orders for perimeter security hardware and software.
- Experience with root cause analysis, risk identification, and risk mitigation.
- Expert knowledge of cabling standards and fiber optic and copper cable termination.
- Knowledge of SDN, IoT, 5G, and cloud-native networking.
- Experience with unclassified voice systems, secure voice systems, red switch, TDM switching, or VoIP.
- Experience supporting government customers in secure environments, including NIPRNET and SIPRNET standards.
- DNS and Infoblox experience.
- Industry-recognized network or cloud certifications such as CCIE, CCNP, CCDP, JDCI, CCVP, AWS Certified Advanced Networking, Azure Solutions Architect Expert, or Google Cloud Professional Cloud Architect.
- Familiarity with Python, Ansible, Terraform, or CloudFormation for network automation.
- Experience with network monitoring tools such as NeuralStar, SolarWinds, Nagios, NetFlow, CloudWatch, or Azure Monitor.
- Experience with Infrastructure as Code tools for cloud network deployment and management.
- Knowledge of cloud security best practices, network segmentation, encryption in transit, and cloud-native security services.
- Experience with multi-cloud and hybrid-cloud connectivity solutions.
- Familiarity with Department of State environments, Foreign Affairs Handbooks, and Foreign Affairs Manuals.
- Strong collaboration, interpersonal, self-awareness, and presentation skills.
What We Do
SkyePoint Decisions provides cybersecurity, engineering, operations, and maintenance IT services for U.S. federal government clients. Its capabilities include cybersecurity architecture and engineering, critical infrastructure and operations, and application development and maintenance. The company offers enterprise-wide and targeted solutions, combining technical expertise and mission awareness to help government clients deliver their missions effectively and securely—anytime, anywhere—and address complex operational challenges.
