Lead Network Engineer

About the role

The All-Domain Integration (ADI) Department partners with the Department of the Air Force to accelerate the delivery of integrated command-and-control capabilities. We are seeking a Lead Network Engineer to support the Department of the Air Force Command, Control, Communications and Battle Management program. This role focuses on a combination of hands-on network prototyping and integration along with developing and guiding software-defined wide area network (SD-WAN) and cloud architecture solutions. The successful candidate will provide technical leadership to government and original equipment manufacturer (OEM) stakeholders, guide architectures and implementation approaches, and help shape strategic plans and technology roadmaps for resilient network capabilities across classification domains.

Responsibilities

Lead Network Engineers contribute to the design, implementation, testing, validation, and modernization of secure, resilient, and scalable network environments spanning LAN/WAN, data center, and tactical operations use cases. Candidates will contribute to:

• Network Design: Defining validated designs for networks with details required for implementation
• Software-Defined / Virtual Networks: Configuring, deploying, testing and validating the latest technologies in software-defined and virtualized networks as well as "traditional" networking
• Mission Security and Assurance: Conducting cybersecurity risk assessments of proposed and existing designs to evaluate security posture, identify threats and vulnerabilities, and recommend mitigation strategies
• Network Data Analytics: Designing, implementing, and enhancing network monitoring and data collection capabilities to provide visibility into performance, availability and operational health
• Tactical and Threat-Informed Networking: Developing solutions for coupling non-traditional, external threat feeds into traditional network routing parameters (i.e., bandwidth, delay, throughput) to better influence communications paths in challenging network environments
• Lab oversight and administration: Contributing to the stand up, compliance, and upkeep of cross-cutting virtual and physical experimentation environments at both the unclassified and classified level
• Building trusted advisor relationships with government sponsors
• Translating mission needs into practical engineering solutions through strong collaboration and technical rigor

Basic Qualifications

• Typically requires a minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience
• Must obtain a DoD 8140 IAT Level II certification (e.g. Security+) within 3 months of hire
• Engage in hands-on, mission-driven work spanning the full solution lifecycle - from design and prototyping through testing, implementation, and monitoring - across various networking use cases and solutions
• Experience in the following areas:
  • Network Design: Defining designs that enable secure, scalable, resilient, and supportable solutions, including target-state designs, operational processes, and implementation artifacts
  • Software-Defined / Virtual Networks: Software-defined and virtualized networks, as well as "traditional" networking protocols and concepts, such as SD-WAN, IPv4/IPv6, interior gateway routing protocols (e.g., BGP and SRv6), Kubernetes, and network segmentation
  • Mission Security and Assurance: Conducting risk assessments, threat and vulnerability identification, and mitigation strategy recommendations
  • Cloud Architecture: Recent hands-on familiarity with Amazon Web Services and/or Microsoft Azure
  • Network Data Analytics: Monitoring, troubleshooting and managing networks using protocols such as SNMP and/or Syslog, NetFlow/IPFIX, APIs and dashboards
  • Technical Reporting and Communications: Clearly communicate technical findings, methodologies, and project outcomes through written reports, briefings, and demonstrations to both internal MITRE and external stakeholders
  • Knowledge Sharing: Actively participate in internal MITRE technical exchange events focused on emerging trends in networking and service management
• Must have an active Secret U.S. Government issued Security Clearance with the ability to obtain and maintain a Top Secret/SCI U.S. Government issued Security Clearance
• Per the U.S. Government's eligibility requirements, you must be a U.S. Citizen to be considered for a security clearance
• This position requires a minimum of 3 days a week on-site

Preferred Qualifications

• Master's degree in Computer Science, Electrical Engineering, Computer Engineering, Data Science related discipline, or equivalent combination of related education and work experience
• Associate level networking/security certification(s) such as Network+, Security+, CCNA or JNCIA
• Excellent analytical and problem-solving skills
• Strong communication, presentation, and writing skills
• The ability to thrive in collaborative working relationships with people of different backgrounds
• Knowledge of, or hands-on experience in:
  • SD-WAN: Hands-on experience with Juniper Secure Session Routers (SSR) and/or Secure Vector Routing (SVR)
  • Network Services: Recent hands-on experience configuring core network and security services (i.e., DHCP, DNS, NTP, Zero Trust, ICAM) and multiple routing protocols (i.e., OSPF, BGP)
  • Virtualization and Continuous Integration: Experience with DevOps paradigms supported by virtualization, containerization, cloud and serverless architectures
  • Software Development and Automation: Experience using languages like Go, C++, Python, and JavaScript; strong proficiency in scripting and automation using tools and frameworks like Ansible, Terraform, PowerShell, and Bash; experience with version control systems, particularly Git, for source code management, collaboration, and CI/CD workflow integration
  • Network Data Analytics & Monitoring: Experience collecting, processing, and analyzing large-scale network data (e.g., logs, flows, telemetry, SNMP, etc.) using tools such as Splunk, Elasticsearch, and Wireshark; developing dashboards and visualizations to monitor network performance, capacity, and anomalies using Grafana, Kibana, and Microsoft Power BI; implementing data pipelines for real-time and batch network analytics using Apache Kafka, Apache Spark, Logstash, and Apache NiFi
  • Tactical and Threat-Informed Networking: Experience integrating distributed and centralized network control algorithms and/or integrating external inputs to "traditional" network path decision logic to facilitate non-standard (i.e., not "shortest path first") routing
  • Network Modeling, Simulation and Analysis: Experience with network simulation, emulation, and test methodologies to validate design assumptions and predict performance

Pay

Salary compensation range: $147,200 - $184,000 - $220,800 annually

Schedule

This position requires a minimum of 3 days a week on-site.