Systems Engineer MID - BAN/WLAN

Location: Onsite Norfolk, VA, Whidbey Island, WA, or Pearl Harbor, HI | Type: Long-term Contract | Pay: up to $61/hr

Candidates must be able to obtain and/or maintain a Department of Defense Secret security clearance as a condition and continuation of employment (sponsorship unavailable).

About the Role

We are seeking an experienced Systems Engineer to support a large-scale, geographically dispersed enterprise network environment. The ideal candidate will bring expertise across LAN/WAN/WLAN, network boundary engineering, routing, switching, network security, and Tier III troubleshooting. This position will serve as a technical resource and escalation point for complex network issues while supporting engineering, configuration management, change management, lab validation, and future enterprise network solutions.

Responsibilities

• Lead efforts to identify, troubleshoot, analyze, and resolve complex network issues in a dynamic enterprise environment.
• Configure, maintain, and troubleshoot network infrastructure, including switches, routers, VLANs, wireless access points (APs), firewalls, and network sensors.
• Provide engineering expertise and operational support for a large-scale intranet environment.
• Serve as a Tier III escalation resource for complex incidents, including coordinating with vendors as necessary for incident resolution.
• Act as a subject matter expert and technical backstop for troubleshooting efforts involving multiple network disciplines.
• Apply knowledge of defense-in-depth principles to secure enterprise network infrastructure.
• Troubleshoot technologies and protocols including routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
• Collaborate with cross-functional engineering and operations teams to enhance network availability, performance, reliability, and security.
• Develop and maintain Engineering Implementation Plans (EIPs) supporting network changes and deployments.
• Create and manage change management tickets for deployments, maintenance activities, upgrades, and other network changes.
• Conduct Root Cause Analysis (RCA) in support of problem management activities and recurring incident resolution.
• Participate in engineering, architecture, and project meetings to design and develop future enterprise network solutions.
• Track engineering and operational work within an Agile/SAFe framework using JIRA.

Configuration Management Responsibilities

• Maintain version-controlled configuration baselines for network infrastructure devices.
• Maintain records of startup and running configurations, firmware versions, security policies, and associated network configuration data.
• Ensure configuration changes are documented, peer-reviewed, approved, and backed up to a centralized repository.
• Maintain change-tracking and rollback capabilities to support operational resilience and configuration recovery.
• Ensure network configurations remain compliant with applicable security guides and organizational cybersecurity policies.
• Conduct pre-production validation testing for firmware upgrades, configuration changes, and security patches.
• Perform testing within an isolated lab environment designed to mirror applicable production network topology and configurations.
• Validate network functionality, security policies, device interoperability, and performance against established baselines.
• Document testing results, identified risks, remediation requirements, and deployment recommendations.

Requirements

• Bachelor's degree with 8–12 years of relevant professional experience; or Master's degree with 6–10 years of relevant professional experience. Equivalent education and experience substitutions may be considered.
• A DoD 8570.01 IAT Level III qualifying certification (such as CASP+, CISSP, or CCNP Security).
• A recognized network vendor certification (such as Cisco CCNA, CCNP, or CCIE).
• Subject Matter Expertise in BAN/LAN/WAN/WLAN and Network Boundary engineering.
• Experience performing technical network maintenance, configuration, troubleshooting, and engineering activities.
• Experience providing Tier III escalation support in large-scale enterprise environments.
• Experience supporting networks of comparable scale to 16,000+ devices across 450+ geographically dispersed locations.
• Hands-on troubleshooting experience with routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
• Experience with SAFe Agile methodologies and JIRA.
• Willingness and ability to participate in an on-call rotation.
• Ability to perform scheduled and unscheduled work during off-hours, including maintenance windows, when required.
• Ability to travel up to 10%.

Preferred Qualifications

• Previous experience supporting Navy or other federal government programs and environments.
• Experience with network automation and Infrastructure as Code (IaC) technologies and practices.
• Hands-on experience with automation technologies such as Ansible and Python.
• Experience with Arista networking technologies.
• Advanced Cisco networking certifications (CCNP or CCIE) are highly desirable.

Benefits

• Supplemental medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP) and 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program, access to certification prep, and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team for consultants and a certified Career Coach.