Network Engineer (Tactical Networks - CANES) | Active Secret clearance

General Dynamics Information Technology

88d • $82,283 - $111,323

About The Position

Transform networks into operational edge as a Network Engineer with GDIT. You’ll architect, integrate, and sustain Consolidated Afloat Networks and Enterprise Services (CANES) and related Navy tactical network capabilities with NIWC Pacific (Codes 55131/55132/55133) in support of PMW-160 Tactical Networks—across ashore, afloat, subsurface, airborne, mobile, and joint environments. MEANINGFUL WORK AND PERSONAL IMPACT Design and integrate CANES L2/L3 architectures (core/distribution/access, spine-leaf, EVPN-VXLAN), IPv4/IPv6, MPLS, multicast (PIM/IGMP), QoS, and segmentation for mission enclaves. Engineer WAN/transport edges (e.g., ADNS-like, SATCOM/optical), GPON, wireless, and boundary defenses (firewalls, IDS/IPS, TACLANE/VPN), aligning to DISA STIGs and Navy policy. Implement/operate virtualized data-center networking (VMware vSphere/vCenter; NSX-T or Cisco ACI), load balancing (e.g., F5), and zero-trust/micro-segmentation patterns. Produce installation design packages (IDPs), rack elevations, cabling/power/HVAC calcs, BoMs, and as-builts; support BESEPs/SHIPALTs and CCB/PTRB change control. Plan and execute SOVT and DT&E network events; author test plans/procedures, conduct packet analysis/throughput testing, and support TRR readiness. Operate/optimize monitoring and observability (SNMP/NetFlow/IPFIX, SolarWinds, Splunk, Wireshark); build dashboards, alerts, and SLA/SLO/KPI reporting. Automate configuration and compliance (Ansible/Python, Git, CI/CD for network configs); detect/remediate drift and enforce golden baselines. Perform Tier III fault isolation and root-cause analysis; document fixes via MS/FRACAS and feed reliability insights to production and installation teams. Coordinate with cybersecurity to preserve ATO conditions (ACAS results, IAVM remediation) and with CM (CMPro) to maintain approved hardware/software baselines. Brief IPTs/WIPTs, mentor junior engineers, and contribute to SE/implementation plans and readiness artifacts.

Requirements

• Active Secret clearance.
• 2+ years network engineering experience for enterprise or tactical C4ISR networks.
• Hands-on experience with BGP/OSPF, EVPN-VXLAN, multicast, QoS, and IPv6.
• Experience with virtualized networking and perimeter security.
• Ability to author IDPs/as-builts/BoMs and support SOVT/DT&E/TRR activities.
• Familiarity with tools like Wireshark, SolarWinds, Git, Ansible, and Python.
• Working knowledge of DISA SRGs/STIGs and Navy change/configuration governance.
• BS/BA in Engineering, Computer Science, Information Systems, or related field.

Nice To Haves

• CCIE, JNCIE, VCP-NV, PCNSE/NSE, RHCSA/RHCE, ITIL v4 Foundation.
• Optical/DWDM/SONET and timing/sync experience.
• Experience with TACLANE/KG-series COMSEC integration.
• Prior NIWC Pacific/PMW-160 support experience.
• Familiarity with container/Kubernetes networking and API-driven network automation.

Responsibilities

• Design and integrate CANES L2/L3 architectures.
• Engineer WAN/transport edges and boundary defenses.
• Implement/operate virtualized data-center networking.
• Produce installation design packages and support change control.
• Plan and execute SOVT and DT&E network events.
• Operate/optimize monitoring and observability tools.
• Automate configuration and compliance.
• Perform Tier III fault isolation and root-cause analysis.
• Coordinate with cybersecurity and configuration management.
• Mentor junior engineers and contribute to implementation plans.

Benefits

• Comprehensive benefits and wellness packages.
• 401K with company match.
• Competitive pay and paid time off.
• Full-flex work week to own your priorities at work and at home.
• Paid Family Leave program providing up to 160 hours of paid leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees