Network Engineer II

KES•San Diego, CA

About The Position

Koam Engineering Systems, Inc. (KES Inc.) is seeking a Network Engineer II to support the engineering, configuration, integration, sustainment, and troubleshooting of enterprise network infrastructure in a Department of Defense Network Operations Center (NOC) environment. The role supports multiple network enclaves, security domains, and mission systems that require reliable, secure, and highly available communications for daily operations, testing, and mission execution. The Network Engineer II designs, configures, maintains, and troubleshoots complex environments incorporating enterprise routers, switches, firewalls, encryption devices, and supporting network services. The work includes routing, switching, network security, encrypted communications, multicast, network segmentation, and end-to-end connectivity, as well as support for system integrations, network changes, technology refreshes, and ongoing sustainment. The position requires hands-on experience with Cisco routing and switching, enterprise firewalls, TACLANE encryption devices, network monitoring and diagnostics, cybersecurity compliance, and technical documentation. Experience in classified networks, DoD Programs of Record, NOCs, C4I environments, or other mission-critical enterprise networks is highly desired. The position requires a related bachelor's degree or equivalent specialized knowledge acquired through military training, formal technical instruction, certifications, and substantial progressively responsible practical experience. Candidates must hold Security+ (DoD IAT Level II) or be able to meet the requirement within three months of employment. An existing U.S. Government DoD security clearance or eligibility at the final Secret level is required, along with the ability to obtain a favorably adjudicated T5 background investigation. U.S. citizenship is required, and employees must maintain the necessary clearance requirements. KES offers a competitive salary and a full range of benefits.

Requirements

Bachelor’s degree in a related field such as computer science, computer engineering, information systems, network engineering, systems engineering, or software engineering; alternatively, equivalent specialized knowledge acquired through a combination of military training, formal technical instruction, certifications, and substantial progressively responsible practical experience.
Security+ (DoD IAT Level II), or ability to meet the requirement within three months of employment.
Existing U.S. Government DoD granted security clearance or eligibility at the final Secret level, and ability to obtain a favorably adjudicated T5 background investigation; required clearance requirements must be maintained.
U.S. citizenship.
3–6 years of progressively responsible experience in network administration, network operations, or network engineering, including at least 2 years of hands-on network engineering in a DoD, enterprise, NOC, lab, test, or other complex technical environment.
Hands-on experience configuring and troubleshooting enterprise routers, switches, firewalls, and network security devices using TCP/IP, OSPF, VLANs, trunking, spanning tree, GRE, IPsec, ACLs, and network segmentation.
Experience independently troubleshooting complex network connectivity, routing, switching, security, and performance issues using network monitoring, packet analysis, logging, and diagnostic tools.
Experience supporting network installations, upgrades, configuration changes, system integrations, and sustainment while maintaining accurate network diagrams, configurations, and technical documentation.

Nice To Haves

Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) Enterprise, or equivalent advanced networking certification.
Experience with Cisco Firepower/FMC, Cisco ASA, TACLANE encryption devices, multicast networking including PIM/IGMP, and tools such as Wireshark, SolarWinds, Nagios, Splunk, or similar technologies.
Experience supporting DISA STIG, RMF, ACAS, vulnerability remediation, configuration compliance, and Authorization to Operate (ATO) requirements in classified or highly regulated DoD network environments.
Working knowledge of Windows Server, Active Directory, DNS, VMware/vSphere, Hyper-V, and network automation or scripting using Python, PowerShell, Ansible, or similar technologies.
Experience supporting DoD, Navy, NIWC Pacific, Ballistic Missile Defense (BMD), C4I/C5ISR, NOC, lab, test, integration, or operational evaluation environments.

Responsibilities

Configure, maintain, and troubleshoot enterprise routers, switches, firewalls, TACLANE encryption devices, and supporting network infrastructure across network enclaves and security domains.
Engineer and implement network solutions using TCP/IP, OSPF, VLANs, 802.1Q trunking, RPVST+, GRE, IPsec, ACLs, multicast, PIM, and IGMP.
Diagnose complex routing, switching, firewall, encryption, multicast, connectivity, and performance issues using packet analysis, logging, monitoring, and other diagnostic tools; perform root cause analysis and corrective actions.
Plan and execute network installations, configuration changes, software and firmware upgrades, migrations, cutovers, system integrations, technology refreshes, and network expansions while minimizing impacts to mission operations.
Configure and maintain Cisco network and security technologies, including Cisco routers, switches, Firepower security appliances, Firepower Management Center (FMC), and associated network services.
Apply DISA Security Technical Implementation Guides (STIGs), RMF requirements, and applicable cybersecurity controls; support vulnerability remediation, patching, configuration compliance, and ACAS findings.
Maintain network configuration baselines, backups, physical and logical diagrams, IP address plans, interface mappings, technical procedures, troubleshooting guides, and as-built documentation.
Coordinate with system administrators, cybersecurity personnel, government engineers, external sites, vendors, and other technical teams to resolve connectivity and interoperability issues and support new capabilities.