Network Engineer III

KES•San Diego, CA

13d

About The Position

Koam Engineering Systems, Inc. (KES Inc.) is an employee-owned small business specializing in technology innovation and systems integration by combining innovative products and reliable engineering services. Headquartered in San Diego, California and with offices in Gig Harbor, WA KES provides services globally in systems engineering & technical assistance, requirements analysis, software design & development, systems integration & testing, independent verification & validation, and operational & logistic support. Position Summary We are currently seeking a Network Engineer III to support the engineering, configuration, integration, sustainment, and troubleshooting of enterprise network infrastructure within a Department of Defense Network Operations Center (NOC) environment. This position supports multiple network enclaves, security domains, and mission systems requiring reliable, secure, and highly available network communications for daily operations, testing, and mission execution. This position is responsible for designing, configuring, maintaining, and troubleshooting complex network environments consisting of enterprise routers, switches, firewalls, encryption devices, and supporting network services. The selected candidate will perform hands-on network engineering across routing, switching, network security, encrypted communications, multicast, network segmentation, and end-to-end connectivity while supporting new system integrations, network changes, technology refreshes, and ongoing network sustainment. The role requires a strong hands-on skillset across Cisco routing and switching, enterprise firewalls, TACLANE encryption devices, network monitoring and diagnostics, cybersecurity compliance, and technical documentation. Experience supporting classified networks, multiple security enclaves, DoD Programs of Record, Network Operations Centers, C4I environments, or other mission-critical enterprise networks is highly desired.

Requirements

Bachelor’s degree in related fields such as computer science, computer engineering, information systems, network engineering, systems engineering, software engineering or a closely related discipline OR Equivalent specialized knowledge customarily acquired through a combination of military training, formal technical instruction, certifications, and substantial progressively responsible practical experience performing work of comparable scope, complexity, and independent judgment
Security+ (DoD IAT Level II) or ability to meet requirements within three months of employment
Existing U.S. Government DoD granted security clearance/eligibility at the final Secret level, and a favorably adjudicated T5/T5R (or equivalent) background investigation.
U.S. Citizenship is required.
Minimum of 5-7 years of progressively responsible experience in network administration, network operations, or network engineering, including at least 3 years performing hands-on network engineering within a DoD, enterprise, NOC, lab, test, or other complex technical environment
Hands-on experience configuring and troubleshooting enterprise routers, switches, firewalls, and network security devices using technologies and protocols such as TCP/IP, OSPF, VLANs, trunking, spanning tree, GRE, IPsec, ACLs, and network segmentation
Experience independently troubleshooting complex network connectivity, routing, switching, security, and performance issues using network monitoring, packet analysis, logging, and diagnostic tools
Experience supporting network installations, upgrades, configuration changes, system integrations, and sustainment while maintaining accurate network diagrams, configurations, and technical documentation

Nice To Haves

Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) Enterprise, or equivalent advanced networking certification
Experience with Cisco Firepower/FMC, Cisco ASA, TACLANE encryption devices, multicast networking including PIM/IGMP, and network monitoring or diagnostic tools such as Wireshark, SolarWinds, Nagios, Splunk, or similar technologies
Experience supporting DISA STIG, RMF, ACAS, vulnerability remediation, configuration compliance, and Authorization to Operate (ATO) requirements within classified or highly regulated DoD network environments
Working knowledge of Windows Server, Active Directory, DNS, VMware/vSphere, Hyper-V, and network automation or scripting using Python, PowerShell, Ansible, or similar technologies
Experience supporting DoD, Navy, NIWC Pacific, Ballistic Missile Defense (BMD), C4I/C5ISR, NOC, lab, test, integration, or operational evaluation environments

Responsibilities

Configure, maintain, and troubleshoot enterprise routers, switches, firewalls, TACLANE encryption devices, and supporting network infrastructure across multiple network enclaves and security domains
Engineer and implement network solutions using technologies and protocols such as TCP/IP, OSPF, VLANs, 802.1Q trunking, RPVST+, GRE, IPsec, ACLs, multicast, PIM, and IGMP
Diagnose complex routing, switching, firewall, encryption, multicast, connectivity, and network performance issues using packet analysis, logging, monitoring, and other diagnostic tools; perform root cause analysis and implement corrective actions
Plan and execute network installations, configuration changes, software and firmware upgrades, migrations, cutovers, system integrations, technology refreshes, and network expansions while minimizing impacts to mission operations
Configure and maintain Cisco network and security technologies, including Cisco routers, switches, Firepower security appliances, Firepower Management Center (FMC), and associated network services
Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), Risk Management Framework (RMF) requirements, and applicable cybersecurity controls while supporting vulnerability remediation, patching, configuration compliance, and Assured Compliance Assessment Solution (ACAS) findings
Maintain network configuration baselines, backups, physical and logical diagrams, IP address plans, interface mappings, technical procedures, troubleshooting guides, and as-built documentation
Coordinate with system administrators, cybersecurity personnel, government engineers, external sites, vendors, and other technical teams to resolve cross-functional connectivity and interoperability issues and support implementation of new capabilities