Network Engineer- CBP

Work Location: Ashburn, VA (onsite). Travel Requirement: Up to 25%. Citizenship: US Citizenship required. Security Clearance: Must possess existing DHS EOD or DHS Suitability.

Responsibilities

• Design, configure, implement, test, troubleshoot, optimize, and document network solutions supporting OTOC, Watchtower, operational technology, and tactical systems.
• Configure and support routers, switches, firewalls, VPN gateways, wireless infrastructure, and associated network services in lab and operational environments.
• Support IPv4/IPv6 addressing, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPNs, access control, and secure network segmentation.
• Engineer network connectivity across on‑premise, cloud, edge, mobile, and disconnected or limited‑connectivity environments.
• Analyze network paths and dependencies to identify connectivity, latency, packet loss, routing, name‑resolution, firewall, VPN, or configuration issues using packet captures, logs, monitoring platforms, and command‑line tools.
• Develop and maintain network diagrams, IP address plans, interface definitions, configuration baselines, port/protocol matrices, build records, and implementation documentation.
• Maintain network configuration management, backups, version control, standards, configuration baselines, and repeatable deployment practices.
• Engineer and review network changes for technical dependencies, capacity and performance impacts, security considerations, validation requirements, implementation sequencing, and rollback needs.
• Provide network engineering and connectivity support for the Watchtower MDM platform and associated OT and tactical devices, including Android, Windows, Linux, iOS, radios, sensors, wearables, and other endpoints.
• Validate network requirements, support device enrollment, provisioning, policy delivery, certificate distribution, remote management, compliance reporting, and over‑the‑air updates.
• Validate Watchtower communications across enterprise, wireless, VPN, cloud, edge, offline, and disconnected‑use scenarios and troubleshoot connectivity between Watchtower services, managed endpoints, identity services, certificate infrastructure, cloud resources, and other integrated systems.
• Build, configure, and maintain representative network lab environments for evaluating new technologies, configurations, devices, software releases, and integration changes before operational fielding.
• Develop and execute network connectivity, interoperability, performance, failover, regression, and operational acceptance test procedures; reproduce field issues, collect diagnostics, isolate root causes,