Network Engineer III

Responsibilities

• Engineer and maintain Cisco IOS-XE routing platforms in complex hub-and-spoke environments
• Implement and troubleshoot IKEv2/IPSEC (FlexVPN) secure overlay architectures
• Design and support Front-Door VRF (FVRF) architectures for multi-transport WAN environments
• Configure and validate BGP peering, route filtering (prefix-lists/route-maps), and community-based policy control
• Support integration and troubleshooting with Type I encryption devices (e.g., TACLANE KG-175 series)
• Analyze and resolve Security Association (SA) establishment and encrypted traffic flow issues
• Validate traffic symmetry and PACE-based failover behavior across multiple transport paths
• Build and replicate production scenarios in lab environments (GNS3, CML, virtual routers) prior to deployment
• Develop and execute structured test plans for new integrations, enhancements, and issue reproduction
• Provide advanced troubleshooting across routing, encryption, transport, and policy layers
• Produce clear, structured technical documentation and network diagrams
• Collaborate across engineering, operations, and mission stakeholders to support secure communications environments

Qualifications

• Equipment / Tool Familiarity: Cisco IOS-XE routers and switches, Palo Alto firewalls, General Dynamics TACLANE KG-175 series (Type I encryption devices), BGP, OSPF, and EIGRP routing protocols, IPSEC / IKEv2 / FlexVPN architectures, Multi-transport WAN architectures (commercial SATCOM familiarity preferred), Network monitoring and logging platforms (Splunk, SolarWinds), VMware virtualized environments, Cisco Identity Services Engine (ISE), Spectracom SecureSync (NTP servers), Cisco voice technologies (CUCM, CUBE, CME) - familiarity preferred
• Technical Skills: Strong understanding of hub-and-spoke network design principles, Experience implementing secure encrypted overlays across diverse transport mediums, Advanced troubleshooting of IPSEC/IKEv2 and BGP interactions, Experience implementing route filtering and policy enforcement using prefix-lists and route-maps, Ability to analyze routing asymmetry and traffic path selection, Familiarity with multi-transport resiliency models and PACE-based routing strategies, Ability to independently design, test, validate, and implement network changes, Strong analytical and problem-solving skills, Strong and ample experience documenting and diagramming network architectures, Exposure to network automation frameworks (Python, Ansible, structured configuration templates) – strongly preferred
• Education: BA/BS + 7 years of experience
• Certifications: CCNP Required, Must meet 8140 IAT II certification, Desired: CCIE, CISSP, Palo Alto certifications, Cisco voice/security certifications

Clearance

A Secret clearance and U.S. Citizenship are required to be considered for the position.

Benefits

• Medical
• Dental
• Vision
• 401K
• Paid Time Off (PTO)
• Life and Disability Insurance
• Employee Assistance Program
• Flexible Spending Accounts (FSA)
• Dependent Care Reimbursement Program
• Group Term Life Insurance
• Supplemental Life and A&D Insurance
• Short & Long Term Disability
• Life Discount Program