The following states/districts are excluded from this job ad: AK, CA, CO, CT, DC, HI, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WY
Future Need - Actively Interviewing
Location: Remote in any United States jurisdiction not excluded from this job advertisement.
Safeguard the connectivity backbone of a mission-critical VA cloud platform. Apply now!
Position Description: The Network/Infrastructure Engineer supports network architecture, Virtual Private Cloud (VPC) design, subnet configuration, Identity and Access Management (IAM) policies, security groups, routing, Public Key Infrastructure (PKI) operations, and Transport Layer Security (TLS) certificate lifecycle management.
Minimum/General Experience: 3 years of experience in cloud network engineering and infrastructure
Minimum Education: Bachelor's Degree in computer science, information technology, network engineering, or related field
Essential Skills/Qualifications:
Excellent experience designing and managing Amazon Web Services (AWS) VPC networking including subnets, route tables, security groups, NACLs, VPC peering, Transit Gateway, PrivateLink, and VPN configurations
Excellent knowledge of PKI operations including TLS certificate issuance, renewal, rotation, and integrity management
Excellent experience implementing and managing AWS IAM including policies, roles, permission boundaries, SCPs, and least-privilege access enforcement aligned with Zero Trust Architecture
Excellent ability to provision and manage 100% of network infrastructure through Infrastructure as Code (IaC) (e.g., Terraform)
Excellent experience maintaining cross-VPC connectivity availability
Excellent experience designing Multiple Availability Zones Active/Active network architectures with automated failover
Excellent knowledge of network security controls including Zero Trust segmentation, micro-segmentation, and Istio service mesh mTLS
Above average experience with multi-region AWS GovCloud networking including DNS-based routing and health-check-driven failover
Working knowledge of FICAM, IPv6 requirements, and Trusted Internet Connection (TIC) standards
Experience supporting a federal agency
Excellent verbal and written communication skills
General Physical Requirements needed to perform the essential functions of this job may vary based on the location of the assignment.
Assignment Location - Remote
Sedentary Work - Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
Typing, communicating, repetitive motions.
Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting.
Inside environmental conditions with protection from outside elements.
Security: Active Federal Civilian Public Trust clearance
U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years
Federal Civilian Public Trust Consists of a review of up to but not limited to:
Covers 10 year period and in some instances lifetime events
OPM Security Investigations Index (SII)
DOD Defense Central Investigations Index (DCII)
National Agency Check (NAC) records
FBI name check
FBI fingerprint check
Credit report check
Written inquiries to previous employers and references listed on the application for employment
Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
Law enforcement check
Court records check
Education check - Attendance and Degrees
Acceptable Credentials
Tasks/activities include, but are not limited to:
Owns all VPC networking including subnet design, route tables, security groups, NACLs, VPC peering, and Transit Gateway configurations
Implements and maintains all PKI operations including TLS certificate issuance, renewal, rotation, and integrity for all platform capabilities and applications
Maintains a complete and accurate certificate inventory including ownership, usage, expiration dates, and renewal mechanisms
Ensures 100% of network and infrastructure configuration is provisioned exclusively through approved IaC tooling (Terraform)
Detects and remediates configuration drift weekly
Implements and enforces Zero Trust Architecture and least-privilege principles across all IAM policies, roles, and service accounts
Supports development of the Multi-Region Enablement Plan including network failover strategies and DNS-based routing
Participates in daily Change Control Board (CCB) meetings for all network-related changes
Ensures all production changes have documented backout plans and post-implementation validation within 2 hours
Contributes network performance metrics, certificate compliance status, and VPC connectivity availability data to the Monthly Maintenance Report
Compensation & Benefits: The annual projected pay range for this position is $79,574 - $100,317 with consideration being given to various factors including but not limited to qualifications, experience, job responsibilities, and geographic location.
Oxley Enterprises, Inc. offers a full array of benefits including:
Medical, dental, vision and prescription drug coverage for you and your family.
Life Insurance, short-term disability and long-term disability paid for by the Company.
Supplemental coverages including Accident, Critical Illness, and Hospital.
Additional Life insurance coverage for you and your dependents.
401k plan with various options to select based on your retirement goals.
Oxley Enterprises®, Inc. is a certified service-disabled veteran-owned (SDVOSB), veteran-owned (VOSB), and woman-owned small business (WOSB) that has 26 years of experience building and delivering quality IT systems and programs. Oxley is ranked in the INC 5000 7 times (2016, 2017, 2018, 2021, 2023, 2024, 2025). Oxley is a 2019 - 2025 Department of Labor HIRE Vets Medallion Award Winner. Oxley is Virginia Values Veterans certified.
All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law.
If you require a reasonable accommodation to apply for a position at Oxley Enterprises, Inc., please send an email to our Human Resources Department at: [email protected] with the following information:
Subject Line: Accommodation Request
Provide a description of your accommodation request
Include your contact information: Full name, Email address, Best number to reach you (optional)
We participate in the E-Verify program. http://www.dhs.gov/E-Verify