Benefits:
401(k)
Dental insurance
Health insurance
Paid time off
Training & development
Vision insurance
Location: Washington, DC Clearance: Public Trust Employment Type: Full-Time
Company Description
Celestial Innovations Group (CIG) is a fast-moving, mission driven technology firm working at the intersection of innovation, national security, and digital transformation. We support forward-thinking government agencies with cutting edge capabilities in cybersecurity, cloud, AI/ML, and IT modernization. At CIG, we don’t just check boxes. We solve real-world problems that matter.
We’re building a culture where smart, curious, and driven people thrive. This is a place where your voice matters, your work has impact, and your growth is part of the mission. If you're looking for a team that values trust, clarity, and the power of innovation, this is where you want to be.
Overview
The Advanced Network Engineer provides senior-level engineering, architecture, and advanced troubleshooting support for complex enterprise network environments supporting government operations. This role ensures secure, resilient, and high-performance connectivity across mission-critical systems.
Key Responsibilities
Lead the design, implementation, documentation, and optimization of enterprise LAN, WAN, wireless, and hybrid network infrastructures, including all switching, routing, firewall, and IP-addressable components.
Document all network devices, cabling interconnects, configurations, and architecture diagrams to support full visibility and lifecycle management.
Provide advanced troubleshooting and root-cause analysis for complex network incidents, outages, performance degradation, and multi-system connectivity issues.
Install, configure, operate, and troubleshoot switches, routers, firewalls, wireless systems, VPN solutions, and ancillary support systems.
Review, analyze, and recommend improvements to network processes, procedures, and standards; implement approved enhancements and ensure adherence to industry best practices.
Develop and implement quality assurance (QA) and quality control (QC) plans for ongoing network maintenance, monitoring, and performance validation.
Review, update, and execute network disaster recovery plans, ensuring resiliency and alignment with enterprise continuity requirements.
Research, design, and implement network security solutions, including firewall management, secure architectures, segmentation, and vulnerability mitigation.
Monitor, analyze, performance-tune, and proactively optimize network availability and utilization using enterprise monitoring tools.
Administer, manage, and harden firewall security appliances, VPN solutions, and secure routing/switching configurations.
Track, recognize, report on, and mitigate network security vulnerabilities; support audits with required documentation and data.
Lead engineering projects as an Engineering Lead or Project Manager, delivering secure and resilient network systems, upgrades, and modernization initiatives.
Prepare and maintain conceptual designs, architecture frameworks, schedules, and cost estimates for new or modified systems; conduct formal design reviews.
Research, compile, and analyze network designs and architectural patterns to assist in diagnosing and resolving complex network engineering issues.
Apply established network engineering standards, policies, principles, and documentation practices to ensure consistency and compliance.
Configure, maintain, and support multicast technologies, VLANs, subnets, and advanced routing protocols across the enterprise.
Support incident, problem, and change management processes to meet contract SLAs and ensure controlled implementation of network changes.
Collaborate with cybersecurity, systems engineering, and operations teams to enforce secure network configurations, segmentation models, and compliance requirements.
Participate in operational readiness reviews, risk assessments, capacity planning, and infrastructure modernization efforts.
Assist with network lifecycle management, vendor coordination, and procurement of hardware, software, and licensing.
Required Qualifications
Bachelor’s degree in IT, engineering, or a related field or equivalent experience.
8+ years of progressive network engineering experience in complex or large-scale enterprise environments.
Extensive experience with networking equipment, software, programming, and design, including routers, switches, firewalls, wireless systems, VPNs, and multicast.
Strong expertise with Cisco networking, VLANs, SD-WAN, QoS, and routing protocols (BGP, OSPF, EIGRP).
Experience administering and managing firewall appliances, secure network architectures, and vulnerability remediation efforts.
Experience developing, reviewing, and implementing network processes, QA/QC plans, standards, and disaster recovery documentation.
Demonstrated ability to conduct design reviews and produce conceptual designs, schedules, and cost estimatesfor network modernization or engineering efforts.
Experience supporting secure or regulated government environments.
Relevant certifications such as CCNP, CCIE, JNCIP, or similar preferred.
Ability to obtain and maintain the required government clearance.
Flexible work from home options available.