Principal Network Engineer

Company Overview

CCG is a technology company focused on equipping customers with the capabilities and support to conduct intelligent and successful cyber operations. We do this by finding the most talented engineers and operators in the country, give them some of the most challenging problems facing the US government, and help them unleash their creativity and problem-solving skills. Excellence is our standard and mission success is our metric.

Role

We are seeking a highly skilled and cleared Network Engineer with expertise in configuring both cloud-based and hardware network devices using Infrastructure as Code (IaC) for classified government projects. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and efficient network infrastructures, ensuring the highest level of security and compliance with federal government standards. This role involves managing both on-premises and cloud environments in support of sensitive, mission-critical systems.

Responsibilities

• Design, configure, and manage classified cloud-based networking environments (AWS, Azure) and physical network devices (routers, switches, firewalls, etc.).
• Implement and maintain network infrastructure using Infrastructure as Code (IaC) tools such as Terraform and Ansible.
• Collaborate with development, security, and cloud engineering teams to integrate networking with CI/CD pipelines and infrastructure automation.
• Work closely with government stakeholders to design scalable and secure network architectures for evolving mission-critical needs.
• Ensure compliance with government security protocols (e.g., NIST, FISMA, DISA STIGs), implementing secure networking solutions such as VPNs, firewalls, and network segmentation.
• Perform vulnerability assessments, hardening of network devices, and risk management tasks to meet government compliance and security objectives.
• Troubleshoot complex network issues across classified environments, perform root-cause analysis, and implement corrective measures for network-related incidents ensuring minimal downtime.
• Document and maintain network architectures, configurations, and IaC scripts with special attention to classified data handling and security protocols.
• Assist with network capacity planning and scaling for hybrid cloud environments, ensuring both cloud and on-premises resources are properly integrated.
• Ensure compliance with industry standards and security best practices in network design, including the implementation of encryption, VPNs, and firewalls.
• Stay up-to-date with emerging technologies and industry trends to optimize and evolve the network architecture.

Required Qualifications

• Active U.S. Government Top Secret clearance (note, only US Citizens are eligible for security clearances)
• Bachelors degree in Computer Engineering, Information Technology, or a related technical discipline. Degree requirement can be met with four years of hands on experience in a software engineer or similar full time position
• 3-5+ years of experience in network engineering, including cloud-based and hardware network device configuration.
• Proficiency in using Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible, CloudFormation).
• Strong knowledge of secure network protocols (TCP/IP, BGP, OSPF, VLANs), firewall management, VPNs, and secure cloud networking.
• Hands-on experience with cloud networking in AWS, Azure, or private cloud environments, with strong knowledge of VPCs, security groups, and hybrid cloud networking (Direct Connect, ExpressRoute).
• Experience with automation and scripting languages (Python, Bash, PowerShell) for network management and troubleshooting.
• Strong understanding of security principles and best practices, including Zero Trust, network segmentation, and firewall rule management.
• Deep understanding of government security frameworks (NIST, FISMA, FedRAMP, DISA STIGs) and the ability to implement secure network designs within those standards.
• Ability to troubleshoot complex networking issues and provide clear solutions quickly and effectively.
• Strong communication and teamwork skills, with the ability to collaborate effectively across multiple teams.
• Experience with CI/CD pipelines and tools such as Jenkins, GitLab, or similar for deploying network changes.

Preferred Qualifications (in addition to the required qualifications)

• Current US SCI eligibility and CI poly
• Certifications such as CCNA, CCNP, AWS Certified Advanced Networking, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH) or equivalent.
• More than 5 years of industry experience in a network engineer or similar role in the Cyber Operation Domain
• Experience with Software-Defined Networking (SDN), SD-WAN, and network orchestration in classified settings.
• Familiarity with network monitoring and performance tools (e.g., Wireshark, SolarWinds, Nagios).
• Experience communicating with customers and end-users 

Working Environment:

• On-site work at government facilities or classified secure locations 3+ days a week.
• Collaborative, high-stakes environment with government stakeholders, working with cutting-edge cloud and secure networking technologies.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status