Sr Network Engineer Job Listing at Tetra Tech BlueWater in Dahlgren, VA (Job ID 3118)

Description

Overview

Bluewater Federal is looking for a Sr Network Engineer to support the Department of the Navy, Naval Sea Systems Command, The Naval Surface Warfare Center Dahlgren Division (NSWCDD).

• Design, implement, secure, and operate resilient network services across NSWCDD's hybrid enterprise (campus core/distribution/access, wireless, VPN/remote access, JWICS/TS collateral/SCI enclaves, cloud interconnects), enabling Zero Trust, COMSEC, and mission assurance.
• Plan/design/engineer, install, administer, and document L2–L7 network services across unclassified/classified environments; maintain DHCP/DNS, VPNs, NAC, and IP address management.
• Engineer firewall/IDS/IPS rulesets and encryption devices; apply EKMS/KMI/COMSEC processes; design/operate the network security stack aligned to DISA STIGs and Zero Trust.
• Integrate and operate wireless (WAPs/Wi‑Fi/5G), cellular integration, PDS considerations, and TEMPEST/TRQ package support as required by projects
• Build/maintain network as‑built/topology drawings, communications diagrams, and functional area logical diagrams; support site surveys and inside/outside plant projects.
• Provide NOC/TCC O&M support, event management, and continuous monitoring; deliver backup/recovery strategies and After‑Action inputs. Support CAB/CCB and Change Enablement.

• 5+ years of professional experience in relation to design and implementation in LAN/WAN corporate environments using Cisco, Juniper, TCP/IP and VoIP technologies with routers, switches, fiber optics, firewalls and cable plant designs.
• Must have a CISA or CISSP certification
• Must have an active Top Secret clearance
• Expert knowledge of enterprise routing/switching, wireless, VPN/remote access, DNS/DHCP, IPAM, and cross‑domain connectivity in DoD environments (u/c‑RDT&E, SDREN, JWICS, cloud).
• Demonstrated experience with STIG compliance, vulnerability/risk mitigation, and Zero Trust architecture enablement (e.g., Comply‑to‑Connect, identity‑centric access)

BlueWater Federal is proud to be an Equal Opportunity Employer.  All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.

• 5+ years of professional experience in relation to design and implementation in LAN/WAN corporate environments using Cisco, Juniper, TCP/IP and VoIP technologies with routers, switches, fiber optics, firewalls and cable plant designs.
• Must have a CISA or CISSP certification
• Must have an active Top Secret clearance
• Expert knowledge of enterprise routing/switching, wireless, VPN/remote access, DNS/DHCP, IPAM, and cross‑domain connectivity in DoD environments (u/c‑RDT&E, SDREN, JWICS, cloud).
• Demonstrated experience with STIG compliance, vulnerability/risk mitigation, and Zero Trust architecture enablement (e.g., Comply‑to‑Connect, identity‑centric access)

BlueWater Federal is proud to be an Equal Opportunity Employer.  All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.

• Design, implement, secure, and operate resilient network services across NSWCDD's hybrid enterprise (campus core/distribution/access, wireless, VPN/remote access, JWICS/TS collateral/SCI enclaves, cloud interconnects), enabling Zero Trust, COMSEC, and mission assurance.
• Plan/design/engineer, install, administer, and document L2–L7 network services across unclassified/classified environments; maintain DHCP/DNS, VPNs, NAC, and IP address management.
• Engineer firewall/IDS/IPS rulesets and encryption devices; apply EKMS/KMI/COMSEC processes; design/operate the network security stack aligned to DISA STIGs and Zero Trust.
• Integrate and operate wireless (WAPs/Wi‑Fi/5G), cellular integration, PDS considerations, and TEMPEST/TRQ package support as required by projects
• Build/maintain network as‑built/topology drawings, communications diagrams, and functional area logical diagrams; support site surveys and inside/outside plant projects.
• Provide NOC/TCC O&M support, event management, and continuous monitoring; deliver backup/recovery strategies and After‑Action inputs. Support CAB/CCB and Change Enablement.