SME Network Engineer (Lorton)Harmonia Holdings Group, LLC • Lorton, VA, US
SME Network Engineer (Lorton)
Harmonia Holdings Group, LLC • Lorton, VA, US
[job_card.variable_days_ago]
[job_preview.job_type]
- [job_card.full_time]
- [job_card.part_time]
[job_card.job_description]Serve as the primary network engineer for diagnosing, resolving, and preventing outages across the CALEA enterprise. Perform packet-level analysis (Wireshark / tcpdump), flow analysis, and log correlation to identify and remediate issues. Lead network upgrades, configuration changes, ACL / policy adjustments, and planned maintenance. Monitor network performance and availability; tune routing, firewall, and VPN parameters as needed. Engineer and maintain firewall policies and segmentation (Palo Alto preferred; Fortinet / Cisco ASA experience acceptable). Support security hardening, vulnerability remediation, and IA / ATO documentation requirements. Produce accreditation-ready artifacts, including boundary diagrams, data-flow representations, rule documentation, and enclave segmentation maps. Collaborate with ISSO and security teams to address findings and strengthen compliance posture. Document and support network dependencies across Active Directory, DNS / DHCP, VMware / vSphere, SAN / iSCSI / NFS storage, and application tiers. Validate end-to-end system functionality after network changes. Partner with Systems, Virtualization, Storage, and Field SMEs to maintain seamless operations across CALEA sites. Contribute to COOP / DR planning, design, and testing to ensure high availability and rapid failover capabilities. Support lab environment setup for replication, patch validation, and network simulation. Maintain technical documentation, diagrams, IP plans, SOPs, and configuration repositories. Coordinate with Harmonia and ICE technical leads to resolve issues, support field operations, and sustain mission readiness. Bachelors degree in IT, Engineering, or related field OR +5 years equivalent experience. 10+ years of enterprise network engineering experience with increasing responsibility. Deep hands-on experience with : Cisco routing / switching (3k9k platforms) Palo Alto or Fortinet firewalls and policy design VPN architecture, IPsec tunneling, PKI integration Network segmentation using VLANs, VRFs, and security zones Packet capture and analysis Network monitoring and telemetry tools (SolarWinds, NetFlow, Splunk, etc.) Demonstrated ability to produce complete network diagrams and architecture documentation based solely on device configuration, logs, and analysis. Strong understanding of cross-domain interactions (DNS, AD, VMware networking, SAN connectivity). CCNA, CCNP Enterprise, or CCNP Security PCNSE Fortinet NSE4 / NSE5 CCIE-level competency (or equivalent expertise) Excellent communication skills with both technical and non-technical stakeholders. Proven ability to work independently in high-pressure, mission-critical environments. Strong analytical, investigative, and documentation skills. Experience supporting federal law enforcement IT systems or CALEA-aligned mission operations. Hands-on participation in COOP / DR architecture or failover site execution. Experience with VPN transitions, network segmentation, and multi-site resiliency. Familiarity with Kubernetes / container environments (e.g., JSI platforms). Experience supporting 24 / 7 high-availability operations. Strong initiative and attention to detail. Adaptability to evolving mission requirements and operational tempo. Collaborative approach with technical teams, vendors, and government partners. Alignment with Harmonias principles of excellence, collaboration, curiosity, and integrity. Must regularly lift / move up to 50 lbs.; occasionally up to 80 lbs. using a hand truck or lift cart. Requires standing, kneeling, crouching, and navigating server-room environments. Normal vision and hearing required; moderate server-room noise.
Harmonia Holdings Group, LLC is an award-winning, rapidly growing federal government contractor committed to providing innovative, high-performing solutions to our government clients and focused on fostering a workplace that encourages growth, initiative, creativity, and employee satisfaction.
SME Network Engineer
Location : Lorton, VA (22079)
Citizenship : U.S. Citizen (required for access to DHS IT systems)
Clearance : Must be able to obtain and maintain DHS / ICE Fitness Determination (Public Trust), including a favorable preliminary Fitness and full NBIS eAPP investigation (SF-85P, OF-306, SSA-89, fingerprints, PREA questionnaire if required)
Schedule : Full-time; business hours (7 : 005 : 30, MF) with required 24 / 7 on-call availability
Hybrid Work : Lorton, VA roles may telework up to 2 days per week; 3 days onsite required (subject to mission needs)
Travel : Occasional CONUS travel; local travel within 50 miles is not reimbursable
Role Overview
Harmonia Holdings Group is seeking an experienced SME Network Engineer to support DHS ICE Homeland Security Investigations (HSI) Title III and Linguists Unit (T3LU) under the CALEA program.
This role provides hands-on leadership across all network engineering functions , including architecture, routing, switching, firewall engineering, VPN and PKI integration, segmentation design, troubleshooting, and IA / accreditation-grade documentation. The SME ensures the integrity, resilience, and performance of mission-critical CALEA networks and collaborates closely with Systems, Virtualization, Storage, and Field Engineering teams to ensure end-to-end operational success.
This position supports DHSs mission while contributing to Harmonias overarching goals : delivering premier technology services, driving mission-focused innovation, sustaining organizational excellence, and being an employer of choice for skilled professionals.
Responsibilities
Network Architecture & Design
- Design, document, and maintain CALEA network architecture, including :
- Layer 2 / Layer 3 topology
- IP address schema and subnetting
- VLAN / VRF segmentation
- Routing design (OSPF, BGP, EIGRP, static routing)
- Firewall zoning, NAT policies, and security segmentation
- VPN tunnels, encrypted transport paths, and PKI integrations
- COOP / DR network routing and failover paths
- Produce and maintain authoritative network diagrams, data flows, trust boundaries, and configuration baselines.
- Evaluate, recommend, and implement enhancements to improve security, availability, and performance.
Network Operations & Troubleshooting
Firewall, Security & Accreditation Support
Interoperability & Cross-Domain Integration
COOP / DR & Lab Engineering
Documentation & Mission Coordination
Required Qualifications
Technical Proficiency
Preferred Certifications
Additional certifications may be required after hire and must be obtained within designated timelines.
Professional Competencies
Preferred Experience
Soft Skills
Physical Demands / Work Environment
[job_alerts.create_a_job]
Network Engineer Sme • Lorton, VA, US
[internal_linking.related_jobs]
The Network Deployment Engineer II will design, develop, build and test systems and products based on optic, photonic and laser technologies.
The position will interact with device, hardware and sof...[show_more]
The Aerospace Corporation is the trusted partner to the nation's space programs, solving the hardest problems and providing unmatched technical expertise.
As the operator of a federally funded resea...[show_more]
TS / SCI – Full-Scope Polygraph.RSekure is seeking a Network Engineer that will play a critical role in leading the design, migration, implementation, optimization, and maintenance of enterpris...[show_more]
Maveris is seeking an experienced .Palo Alto Networks and Cisco technologies to support the Department of State in Washington, DC.
The ideal candidate will bring deep technical knowledge in fir...[show_more]
Oneida Technical Solutions, LLC (OTS) has a rich history of providing IT support and associated services in highly complex, highly regulated, highly secure environments, including the U.Department ...[show_more]
Telecommunications Network Engineer - Senior.IT-I Critical Sensitive | Secret Clearance.Certifications (Computing Environment) : .
Cisco Certified Network Professional (CCNP).Cisco Certified Wireless ...[show_more]
The ideal candidate will have a minimum of 3+ years of Network Operations Center or comparable technology experience, preferably with a Bachelors or Masters degree in a related field.Vendor certifi...[show_more]
Network Engineer The Team UberEther is a leader in the Identity and Access Management (IAM) and #ZeroTrust space.Our platform and expert services team enable government and commercial ...[show_more]
Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's...[show_more]
Senior Lead Network Engineer II.Department : Information Technology.CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance ...[show_more] Department : Information Technology.CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large-scale network project...[show_more] 
Apex Systems is currently hiring for a Sr.Network Engineer supporting a federal government agency!.Project Details / Mission Supported : .
Perform network design and engineering support services for t...[show_more]
Salaried High Fringe / Full-Time.LMI is seeking a skilled Senior Network Engineer to support our Enterprise Technology Services Infrastructure Solutions group.
This position is a subject matter expert...[show_more]
Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more t...[show_more]
Network Engineer Will Make an Impact?.Tests and analyses all elements of network facilities.Monitors and controls the performance and status of network resources on multiple enclaves utilizing soft...[show_more]
We are seeking a dedicated mid-level Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ).This role is an op...[show_more]
The Digital Modernization Sector at Leidos is seeking a.Tier III O&M Network Engineer to support the customer's various wide area networks (WANs) and local area networks (LANs).This position will p...[show_more] Network Management Engineer (Infrastructure Engineer).The AGUN program is a highly demanding mission and requires expert technical and professional management to support the Army's global wide area...[show_more]
Network Engineer (Ashburn)
Astreya • Ashburn, VA, US
[job_card.part_time]
[last_updated.last_updated_variable_days] • [promoted]
Sr. Network Engineer
The Aerospace Corporation • Chantilly, VA, United States
[job_card.full_time]
[last_updated.last_updated_variable_days] • [promoted]
Network Engineer
RSEKURE • Chantilly, VA, USA
[job_card.full_time]
[filters_job_card.quick_apply]
[last_updated.last_updated_30]
Senior Network Engineer
Maveris • McLean, VA, US
[job_card.full_time]
[filters_job_card.quick_apply]
[last_updated.last_updated_30]
Network Engineer
Oneida Technical Solutions • Chantilly, VA, USA
[job_card.full_time]
[filters_job_card.quick_apply]
[last_updated.last_updated_30]
Telecommunications Network Engineer - Senior
Nationwide IT Services • Fairfax, VA, United States
[job_card.full_time]
[last_updated.last_updated_30] • [promoted]
Network Operations Center Engineer (Ashburn)
Encore Talent Solutions • Ashburn, VA, US
[job_card.part_time]
[last_updated.last_updated_variable_hours] • [promoted] • [new]
Network Engineer
UBERETHER INC • Sterling, VA, US
[job_card.full_time]
[filters_job_card.quick_apply]
[last_updated.last_updated_30]
Network Engineer (SME)
Fusion Technology • Chantilly, VA, USA
[job_card.full_time]
[filters_job_card.quick_apply]
[last_updated.last_updated_variable_days]
Senior Lead Network Engineer II
CGS • Fairfax, Virginia, United States, 22030
[job_card.full_time]
[last_updated.last_updated_30]
Senior Lead Network Engineer
CGS • Fairfax, Virginia, United States, 22030
[job_card.full_time]
[last_updated.last_updated_30]
Senior Network Engineer (Reston)
Apex Systems • Reston, VA, US
[job_card.part_time]
[last_updated.last_updated_variable_days] • [promoted]
Senior Network Engineer
LMI Consulting, LLC • Tysons, VA, United States
[job_card.full_time]
[last_updated.last_updated_30] • [promoted]
Sr. Network Engineer
Visa • Ashburn, VA, United States
[job_card.full_time]
[last_updated.last_updated_30] • [promoted]
Senior Network Engineer
TEKsystems • Quantico, VA, United States
[job_card.full_time]
[last_updated.last_updated_1_day] • [promoted]
Network Engineer, Mid
BOOZ, ALLEN & HAMILTON, INC. • McLean, VA, US
[job_card.full_time] +1
[last_updated.last_updated_30] • [promoted]
Sr. O&M Network Engineer
Leidos Inc • Chantilly, VA, United States
[job_card.full_time]
[last_updated.last_updated_30] • [promoted]
Network Infrastructure Engineer (Senior)
Leidos Inc • Reston, VA, United States
[job_card.full_time]
[last_updated.last_updated_30] • [promoted]