Mission Network Engineer

Metrea•Washington, DC

1d•Onsite

About The Position

The Mission Network Engineer is responsible for maintaining, securing, and evolving complex network environments that support enterprise information systems, remote ISR systems, research and development activities, and mission-specific operations. These environments include physical and virtual infrastructure, Linux-based systems, multiple network paths, secure remote access, overlay networks, layered security controls, and unique communications architectures. This role requires more than traditional enterprise network administration. The ideal candidate has a broad technical foundation across networking, Linux, virtualization, secure communications, systems integration, and special or non-standard communications TTPs. The Mission Network Engi-neer will support secure connectivity, segmentation, traffic protection, low-signature communications, obfuscation, anonymity, and resiliency techniques in accordance with authorized requirements, applicable policy, export control requirements, access management procedures, and oper-ational security standards.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Communications Systems, or related discipline. Relevant military, government, or industry experience may be considered in lieu of degree
Minimum 7 years of experience designing, administering, securing, and troubleshooting complex network environments in secure, classified, mission-critical, operational, or highly technical settings
Broad hands-on knowledge across networking, Linux, virtualization, secure communica-tions, systems integration, and operational infrastructure
Strong experience with TCP/IP, routing, switching, VLANs, subnetting, DNS, DHCP, NAT, firewalls, VPNs, wireless networking, secure remote access, Linux networking, and command-line troubleshooting
Experience designing and supporting physical, virtual, cloud, hybrid, distributed, Linux-based, or mission-specific network architectures
Experience with network, firewall, VPN, and routing technologies such as Cisco, Juniper, Palo Alto, Fortinet, Aruba, Ubiquiti, MikroTik, pfSense, OPNsense, WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools
Experience with secure tunneling, overlay networks, mesh VPNs, redundant connectivity, failover, virtual appliances, and resilient communications architectures
Experience supporting remote systems, distributed infrastructure, fielded technical sys-tems, ISR systems, tactical networks, expeditionary networks, or other non-standard communications environments preferred
Understanding of OPSEC-informed network design, traffic protection, infrastructure con-cealment, anonymity, obfuscation, low-signature communications, and secure communi-cations techniques
Experience with network monitoring, packet capture, logging, SIEM, IDS/IPS, vulnerability remediation, scripting, automation, technical documentation, and compliance frameworks such as NIST 800-171, DFARS 252.204-7012, CMMC, or RMF
Strong communication skills and ability to work independently in ambiguous environments while developing practical solutions for unique operational requirements
Must be a U.S. citizen with the ability to obtain and maintain a U.S. Government security clearance.

Nice To Haves

Experience supporting U.S. Government, DoD, military, intelligence, SOF, ISR, EW, cyber, or other national security environments
Experience supporting classified, compartmented, protected, or controlled network envi-ronments such as SIPR, JWICS, SAP, SCI, or equivalent environments
Previous military, defense, government, or operational experience involving secure com-munications, mission networks, tactical networking, remote ISR systems, or non-standard communications architectures
Experience with SOF, JSOC, Special Operations, intelligence, U.S. National Laboratories, protected research environments, restricted engineering environments, or similar security-sensitive technical organizations preferred
Familiarity with zero-trust architecture, cross-domain solutions, network segmentation, secure transport, tunneling, overlay networks, mesh VPNs, traffic shaping, network ob-fuscation, anonymity, and low-signature infrastructure concepts
Experience supporting networks with unique OPSEC, access control, attribution-management, export control, or infrastructure protection requirements
Completion of relevant operational network and secure communications training preferred, including operational infrastructure, remote bridging, network analysis, Linux for operators, digital signature reduction, tunneling, secure transport, and operational network infrastructure
Experience developing or supporting incident response playbooks, internal security audits, vulnerability management activities, inspections, or accreditation efforts
Certifications such as CCNA, CCNP, CompTIA Network+, Security+, CySA+, CISSP, Pa-lo Alto, Fortinet, Juniper, Linux+, cloud networking, or equivalent certifications in networking, security, cloud, or infrastructure engineering
Active Secret, Top Secret, or TS/SCI clearance preferred

Responsibilities

Design, build, configure, maintain, and troubleshoot complex commercial, classified, con-trolled, and mission-specific network environments
Support network infrastructure for enterprise information systems, remote ISR systems, and distributed operational environments
Configure and manage routing, switching, firewalls, VPNs, secure remote access, wire-less networking, virtual networking, Linux networking, and network security appliances
Implement secure tunneling, remote access, mesh VPN, site-to-site VPN, overlay net-working, and resilient communications solutions using technologies such as WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools
Develop and maintain secure network architectures that support segmentation, access control, traffic protection, low-signature communications, obfuscation, monitoring, and operational security requirements
Troubleshoot complex connectivity and performance issues across physical networks, vir-tual networks, Linux systems, VPNs, cloud services, endpoints, servers, security tools, ISR systems, and mission applications
Monitor network performance, analyze traffic, conduct packet capture, and provide rec-ommendations for reliability, capacity, security, and quality of service
Plan and execute network upgrades, expansion, lifecycle management, configuration changes, and technical improvements to support evolving mission and enterprise requirements
Evaluate, test, and integrate new network technologies, communications tools, open-source platforms, appliances, and services
Support network security, compliance, and incident response activities, including firewall policy management, segmentation, logging, IDS/IPS integration, vulnerability remediation, documentation, and audit support
Create and maintain network diagrams, technical documentation, configuration baselines, standard operating procedures, implementation guides, records, and reports
Coordinate with systems administrators, cybersecurity teams, vendors, cross-functional technical teams, and mission stakeholders to resolve issues and support project delivery
Provide technical guidance to less-experienced staff as needed.