TS/SCI Network Engineer

Insight Global is looking for a Lead Network Engineer to support a global telecommunication provider’s public sector group in Herndon, VA. This individual needs to be capable of assessing the current state infrastructure, configuration and producing a target-state vision and strategy with best practice recommendations. Applies advanced engineering and network principles, theories, concepts, technologies to solve unusually complex problems and issues. Interacts and drives vendor requirements, resolution of bug fixes, code upgrades, and vendor development as necessary. Resolves difficult production/interoperability problems by working with cross functional teams and applying advanced engineering and network principles, theories and concepts. Regarded as a subject matter expert and may act as a technical project leader or provide leadership for the team and/or customer. Self-motivated with problem solving capabilities, sense of urgency and accountability. The position is hybrid and requires weekly on-site support. Main Responsibilities include, but aren’t limited to:

• Install, configure, and maintain Juniper network devices, including MX, QFX, and the latest SRX Series security platforms.
• Configure and support security services on SRX devices, including zone-based policies, firewall filters, IPsec/SSL VPNs, tunneled connections, and MACsec encryption.
• Implement and troubleshoot advanced routing protocols, including BGP (with communities, route filtering, AS-path, MED), OSPF, IS-IS, and MPLS/LDP.
• Support and maintain high-speed fiber optic interfaces, including 10G, 40G, and 100G ports, with experience in LACP, optical diagnostics, and transceiver troubleshooting.
• Manage network performance, availability, and security by applying CoS/QoS, policy-based routing, and traffic shaping techniques.
• Design and support VPN tunnels and secure transport links between data centers, cloud services, and remote sites.
• Maintain detailed and accurate network documentation, including configurations, IP address management, and topology diagrams.
• Works directly with the customer to advise on requests and make necessary configuration changes.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Active TS/SCI with ability to sit for a Poly.  Candidates will be subject to a background investigation.
• 5+ years of experience with Juniper platforms (MX, QFX, and new-generation SRX devices).
• Strong expertise in routing protocols such as BGP, OSPF, IS-IS, and MPLS, including real-world experience with complex policy configurations.
• Experience with security and tunneling technologies, including MACsec, IPsec, GRE, and firewall zoning and policies.
• Proficiency working with fiber interfaces at 10G, 40G, and 100G, including troubleshooting transceivers, optical power levels, and port configurations.
• Advanced knowledge of the JUNOS CLI, with familiarity in network automation tools such as Ansible, Junos PyEZ, or other scripting platforms.
• Experience working with network monitoring and management tools, including SNMP, syslog, NetFlow, and centralized logging systems.
• Ability to support after-hours outages and maintenance actions.

• Juniper Networks Certifications: JNCIS-SEC, or higher

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.