Sr. Principal Network Engineer

About this role

<div class="content-intro"><p>Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world.</p> <p>Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact.</p> <p>We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security.</p></div><p><strong>Role</strong></p> <p>We are seeking a highly skilled and cleared Network Engineer with expertise in configuring both cloud-based and hardware network devices using Infrastructure as Code (IaC) for classified government projects. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and efficient network infrastructures, ensuring the highest level of security and compliance with federal government standards. This role involves managing both on-premises and cloud environments in support of sensitive, mission-critical systems.</p> <p><strong>Responsibilities</strong></p> <ul> <li>Design, configure, and manage classified cloud-based networking environments (AWS, Azure) and physical network devices (routers, switches, firewalls, etc.).</li> <li>Implement and maintain network infrastructure using Infrastructure as Code (IaC) tools such as Terraform and Ansible.</li> <li>Collaborate with development, security, and cloud engineering teams to integrate networking with CI/CD pipelines and infrastructure automation.</li> <li>Work closely with government stakeholders to design scalable and secure network architectures for evolving mission-critical needs.</li> <li>Ensure compliance with government security protocols (e.g., NIST, FISMA, DISA STIGs), implementing secure networking solutions such as VPNs, firewalls, and network segmentation.</li> <li>Perform vulnerability assessments, hardening of network devices, and risk management tasks to meet government compliance and security objectives.</li> <li>Troubleshoot complex network issues across classified environments, perform root-cause analysis, and implement corrective measures for network-related incidents ensuring minimal downtime.</li> <li>Document and maintain network architectures, configurations, and IaC scripts with special attention to classified data handling and security protocols.</li> <li>Assist with network capacity planning and scaling for hybrid cloud environments, ensuring both cloud and on-premises resources are properly integrated.</li> <li>Ensure compliance with industry standards and security best practices in network design, including the implementation of encryption, VPNs, and firewalls.</li> <li>Stay up-to-date with emerging technologies and industry trends to optimize and evolve the network architecture.</li> </ul> <p><strong>Required Qualifications</strong></p> <ul> <li>Active U.S. Government Top Secret clearance (note, only US Citizens are eligible for security clearances)</li> <li>Bachelors degree in Computer Engineering, Information Technology, or a related technical discipline. Degree requirement can be met with four years of hands on experience in a software engineer or similar full time position</li> <li>3-5+ years of experience in network engineering, including cloud-based and hardware network device configuration.</li> <li>Proficiency in using Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible, CloudFormation).</li> <li>Strong knowledge of secure network protocols (TCP/IP, BGP, OSPF, VLANs), firewall management, VPNs, and secure cloud networking.</li> <li>Hands-on experience with cloud networking in AWS, Azure, or private cloud environments, with strong knowledge of VPCs, security groups, and hybrid cloud networking (Direct Connect, ExpressRoute).</li> <li>Experience with automation and scripting languages (Python, Bash, PowerShell) for network management and troubleshooting.</li> <li>Strong understanding of security principles and best practices, including Zero Trust, network segmentation, and firewall rule management.</li> <li>Deep understanding of government security frameworks (NIST, FISMA, FedRAMP, DISA STIGs) and the ability to implement secure network designs within those standards.</li> <li>Ability to troubleshoot complex networking issues and provide clear solutions quickly and effectively.</li> <li>Strong communication and teamwork skills, with the ability to collaborate effectively across multiple teams.</li> <li>Experience with CI/CD pipelines and tools such as Jenkins, GitLab, or similar for deploying network changes.</li> </ul> <p><strong>Preferred Qualifications (in addition to the required qualifications)</strong></p> <ul> <li>Current US SCI eligibility and CI poly</li> <li>Certifications such as CCNA, CCNP, AWS Certified Advanced Networking, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH) or equivalent.</li> <li>More than 5 years of industry experience in a network engineer or similar role in the Cyber Operation Domain</li> <li>Experience with Software-Defined Networking (SDN), <strong>SD-WAN</strong>, and network orchestration in classified settings.</li> <li>Familiarity with network mo