Role Description Core4ce is seeking a Senior Enterprise Network Services Engineer to design, implement, and maintain secure and scalable enterprise network infrastructures. The ideal candidate will have a strong background in network engineering, security, routing, firewall management, load balancing, and automation. This role requires deep knowledge of TCP/IP networking, encryption protocols, traffic analysis, scripting, and cloud networking. Additionally, the candidate will be responsible for planning IT security projects, troubleshooting complex network issues, and ensuring compliance with security policies. - Design, configure, install, and manage enterprise network infrastructure, including routers, switches, firewalls, and load balancers. - Plan and schedule the installation or modification of network hardware and software. - Implement and maintain secure network configurations across multi-VRF Cisco routers and enterprise environments. - Troubleshoot and analyze TCP/IP network traffic, including TCP 3-way handshake, TCP window scaling, and MSS. - Capture and analyze network packets using TCPDump (Linux) and Flow Monitor Capture (Cisco ASR). - Implement multi-protocol routing solutions with BGP, OSPF, and VRF-based networks. - Use Wireshark, TCPDump, and other diagnostic tools for network performance analysis. - Perform TLS/SSL handshake troubleshooting and security configuration. - Configure and maintain firewalls (Palo Alto, Cisco), including security policies, VPNs, and intrusion prevention systems (IPS). - Implement AAA technologies (Cisco ISE, LDAP, OTP) for access management. - Ensure certificate management and encryption, including TLS/SSL and OpenSSL operations. - Install, configure, and troubleshoot digital certificates on F5 LTM/GTM/APM/ASM appliances. - Implement F5 Client Constrained Delegation (C3D) for certificate delegation. - Enable certificate-based authentication using Client-SSL profiles and APM policies. - Deploy and maintain network monitoring, alerting, and repair systems in production environments. - Troubleshoot BGP neighbor configurations, VPNv4 unicast summary, and OSPF network participation. - Optimize and troubleshoot load balancing solutions and DNS-based traffic management. *This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth. Qualifications - Minimum 4 years of hands-on experience as a Network Administrator or Network Security Engineer. - Secret clearance w/Tier 5 investigation. - Strong knowledge of OSI and TCP/IP network models, TCP 3-way handshake, and window scaling. - Experience with Palo Alto and Cisco firewalls. - Experience with F5 LTM, GTM, APM, ASM for load balancing and security. - Cisco Certified Network Professional (CCNP) certification or equivalent experience or willingness to get within 45 days of hire. Requirements - Strong troubleshooting skills with routing protocols (BGP, OSPF, VRF, LISP). - Familiarity with network packet capture tools (TCPDump, Wireshark). - Understanding of essential network services (DNS, SMTP, NTP, IMAP, SNMP). - Experience in TLS/SSL security, OpenSSL, and certificate management. - Experience working with Unix/Linux-based systems. - Experience with network automation (REST APIs, Syslog, XML, SNMP). - Experience deploying and troubleshooting load-balanced services and SSL certificate management. Benefits - 401(k) with 100% company match on the first 6% deferred, with immediate vesting. - Comprehensive medical, dental, and vision coverage—employee portion paid 100% by Core4ce. - Unlimited access to training and certifications, with no pre-set cap on eligible professional development. - Tuition assistance for job-related degrees and courses. - Paid parental leave, PTO that grows with tenure, and generous holiday schedules. - The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

**What You Will Own:** - Design and operate reliable cross-DC and hybrid connectivity across IPsec, BGP, routing policy, firewalling, DNS, Cloudflare, provider networking, and cloud connectivity. - Build highly available network paths across data centers, public cloud providers, OpenNebula, Kubernetes/Talos, and bare-metal infrastructure. - Own network changes end to end: design, risk assessment, peer review, rollout, monitoring, validation, rollback, and post-change notes. - Replace fragile manual patterns with documented, observable, repeatable services using Git review, automation, scripts, source-of-truth data, and monitoring. - Debug and resolve production incidents involving Linux networking, BIRD/FRR, strongSwan, Juniper JunOS, firewalls, Cloudflare, DNS, MTU/MSS, asymmetric routing, NAT/conntrack, packet loss, Kubernetes CNI behavior, and provider constraints. - Maintain architecture documents, topology diagrams, HLD/LLD specs, runbooks, disaster recovery procedures, configuration snapshots, IPAM/source-of-truth data, and operational handoff material. - Work closely with IaaS, SRE/Observability, Security, Automation/Data, Platform, Service Delivery, and product teams.

Role Description We are hiring a hands-on Senior Cloud Network Engineer to own and evolve the network layer of our hybrid infrastructure. This is an engineering role with real architecture ownership: you will design, implement, monitor, document, automate, secure, and troubleshoot production networking across data centers, cloud regions, Kubernetes/Talos clusters, OpenNebula environments, and bare metal. This is a technical ownership role. It is not a diagrams-only architecture position, and it is not a people-management role. You will define technical solutions, ship production changes, verify behavior, support incidents, and leave behind the runbooks, diagrams, and automation that make the next change safer. How We Work: - Remote-first Infrastructure team organized into small senior cells. - Work with one existing network engineer, core infrastructure engineers, and adjacent Infrastructure teams. - Networking is a high-impact shared dependency, valuing calm incident work and automation that reduces repeat pressure. - Focus on turning complex demand into reliable systems, clear ownership, safer changes, and observable operations. This role is a strong fit if you enjoy: - Moving between architecture, packet captures, production configuration, monitoring, runbooks, rollback plans, and failure drills. - Real ownership of cross-DC, on-prem, private cloud, and public/provider infrastructure. It is probably not the right fit if you are looking for: - A pure architecture role. - A large dedicated network team. - Only planned project work. - No incident participation. - Manual CLI-only changes without documentation, review, automation, and validation. Qualifications - Senior production networking experience in environments where availability matters. - Strong BGP and routing fundamentals: prefix filtering, communities, route policy, failover, BFD or similar mechanisms, asymmetric routing, traffic steering, and debugging. - Strong IPsec, VPN, and site-to-site connectivity experience, ideally with strongSwan or similar tooling. - Deep Linux networking knowledge: iproute2, tcpdump, nftables/iptables, conntrack, system networking, DNS behavior, NIC/offload basics, and MTU/MSS troubleshooting. - Datacenter networking fundamentals: VLANs, LACP, switching, firewalls, optics/cabling awareness, maintenance windows, and backup/recovery practices. - Cloud and provider networking experience: VPC/VNet-style networks, CIDR planning, route tables, security groups/NACLs/firewalls, NAT/egress, VPN, load balancers, DNS, and provider limitations. - Kubernetes networking fundamentals: CNI, Services, Ingress, NetworkPolicy, node/pod/service paths, egress control, DNS, load balancing, and packet-level troubleshooting. - Network observability and performance mindset: telemetry, flow logs, synthetic checks, bandwidth and latency analysis, packet loss, jitter, saturation, and provider or appliance limits. - Network security operations: segmentation, firewall rule lifecycle, least privilege, AAA concepts, secrets handling, and safe maintenance-window discipline. - Comfort with infrastructure automation using scripting, APIs, Ansible, Terraform/OpenTofu, Git-based reviews, repeatable rollouts, and configuration validation. - Clear written communication in remote and asynchronous teams: change plans, incident updates, runbooks, risk statements, rollback plans, and owner/date commitments. - Sound judgment under uncertainty: you can make bounded decisions, but you verify production impact and blast radius before acting. Requirements - Design and operate reliable cross-DC and hybrid connectivity across IPsec, BGP, routing policy, firewalling, DNS, Cloudflare, provider networking, and cloud connectivity. - Build highly available network paths across data centers, public cloud providers, OpenNebula, Kubernetes/Talos, and bare-metal infrastructure. - Own network changes end to end: design, risk assessment, peer review, rollout, monitoring, validation, rollback, and post-change notes. - Replace fragile manual patterns with documented, observable, repeatable services using Git review, automation, scripts, source-of-truth data, and monitoring. - Debug and resolve production incidents involving Linux networking, BIRD/FRR, strongSwan, Juniper JunOS, firewalls, Cloudflare, DNS, MTU/MSS, asymmetric routing, NAT/conntrack, packet loss, Kubernetes CNI behavior, and provider constraints. - Maintain architecture documents, topology diagrams, HLD/LLD specs, runbooks, disaster recovery procedures, configuration snapshots, IPAM/source-of-truth data, and operational handoff material. - Work closely with IaaS, SRE/Observability, Security, Automation/Data, Platform, Service Delivery, and product teams. Benefits - A focus on professional development. - Interesting and challenging projects. - Fully remote work with flexible working hours, allowing you to schedule your day and work from any location worldwide. - Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. - Compensation for private medical insurance. - Co-working and gym/sports reimbursement. - Budget for education. - The opportunity to receive a reward for the most innovative idea that the company can patent.

Title: Network Operations Engineer, Lead Locations: Arlington, VA Alexandria, VA Work Type: Hybrid, Full Time Job ID: R0242108 Job Description: The Opportunity: In today's fast‑moving operational environment, the Army depends on a resilient, intelligently engineered network to accomplish its mission. As a Network Operations Specialist with Booz Allen, you'll be at the heart of that mission-ensuring enterprise and tactical systems stay online, secure, and ready for anything. You won't just monitor a network, you'll anticipate its needs, refine its architecture, lead its evolution, and help shape the digital backbone that powers the Army's readiness. In this role, you will monitor network administration and maintenance operations, ensuring stable, high‑performance connectivity across complex and distributed environments. When incidents arise, you will lead the resolution of network issues, restoring operations quickly and preventing recurrence. You'll bring extensive technical expertise to develop innovative solutions for complex problems-ensuring networks are not just functional but future‑ready. You'll thrive in this role if you're a problem‑solver who understands that networks are more than wires and packets-they're operational lifelines. You'll collaborate with cyber, cloud, and systems teams to integrate Zero Trust principles, streamline network configurations, and strengthen resilience across systems. You'll help evolve, adapt, and accelerate toward modernization goals that directly support warfighters, joint mission partners, and national‑level readiness. Join us. The world can't wait. You Have: - 8+ years of experience in managing enterprise network and maintenance operations - Experience with Department of War enterprise network operations - Experience performing and managing second‑level troubleshooting for system, application, or network issues - Experience using enterprise monitoring and incident management platforms, such as ServiceNow, JIRA, or EMS - Experience escalating and coordinating with Tier 3 teams for complex problem resolution - Ability to analyze logs, correlate events, and validate system‑level issues - Ability to work rotating round-the-clock shifts, including nights, weekends, and holidays - TS/SCI clearance - Bachelor's degree in IT, Cyber, or Engineering - Security+ CE, SSCP, CCNA-Security, or GSEC Certification Nice If You Have: - Experience supporting on‑call, after‑hours, or recall‑based operations models - Experience with scripting, automation tools, or troubleshooting frameworks - Experience analyzing dashboards, mission applications, system metrics, or infrastructure health tools - Experience with SD‑WAN or multi‑site WAN solutions - Experience with Army Enterprise Networks - Ability to communicate effectively with technical and non-technical staff - Ability to collaborate with cross‑functional engineering and mission teams in a high‑tempo environment - Possession of excellent written and verbal communication skills - Master's degree in IT, Cyber, or Engineering - Industry cloud foundational AWS Cloud Practitioner, CompTIA Cloud+, or MS Azure Fundamentals Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. - Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. - Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. - Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.