Network Engineer

SAIC•Springfield, VA

About The Position

SAIC is hiring a Network Engineer to engineer and operate a classified enterprise network that reaches diplomatic posts around the world. The role covers the network as an integrated system, including encrypted circuits, remote-post routers, and the transport between them. Engineers must troubleshoot remotely through local staff across time zones, often over constrained or satellite circuits and sometimes without an out-of-band path. The work requires reasoning from incomplete information and making sound decisions under operational constraints. Occasional international travel may be required. The Network Engineer will support secure routing, switching, and transport across the worldwide classified network, including its encrypted transport layer and in-line network encryptors. The position provides Tier II and Tier III incident escalation and participates in an on-call rotation covering the mission’s time zones. Network changes are performed through formal configuration control, with testing, back-out planning, and post-change verification. The role also includes post network architecture, site surveys, equipment refresh, bandwidth and capacity planning, device access control and hardening, remediation of assessment findings, monitoring and configuration compliance, and documentation of designs, configurations, and runbooks. The role offers the opportunity to work across the network rather than a single layer, in an environment undergoing modernization that includes encrypted transport, cryptographic modernization, and network assurance tooling. The work supports secure communications for people in locations where reliable service has significant consequences.

Requirements

Bachelor’s degree in a technical discipline and five years of enterprise network engineering experience; four additional years of relevant experience may substitute for the degree.
Working knowledge of routing and switching fundamentals, including BGP, OSPF, and VLANs, and the ability to reason about convergence and failure behavior in a large topology.
Working knowledge of WAN technologies, including VPN and tunneling, QoS, circuit troubleshooting, and working with carriers and transport providers.
Firewall and network security experience, including ACL and policy design.
Ability to read packet captures and reason from them when the symptom and cause are not in the same place.
CCNP-level knowledge or equivalent demonstrated experience.
Current DoD 8140 / 8570 IAT Level II certification, such as Security+ CE.
Willingness to participate in an on-call rotation, support off-hours maintenance windows aligned to overseas time zones, and travel occasionally for post work.
U.S. citizenship.
Active TOP SECRET clearance with SCI eligibility and ability to obtain cryptographic access authorization.

Nice To Haves

Experience with HAIPE-compliant in-line network encryptors or other Type 1 encryption in an operational network.
Commercial Solutions for Classified (CSfC) architecture experience.
Satellite, low-bandwidth, or high-latency circuit engineering experience.
Department of State or other federal overseas post experience.
SD-WAN, network automation, or infrastructure-as-code experience for network configuration.
Experience with network assurance and modeling tools, enterprise monitoring platforms, and ServiceNow ITSM and CMDB.
CCIE or vendor certification on the deployed platform.

Responsibilities

Engineer and operate secure routing, switching, and transport across a worldwide classified network, including encrypted transport and in-line network encryptors.
Troubleshoot complex faults end to end, identify whether causes are in the circuit, transport, encryption, routing, or devices, and restore service to posts under operational time pressure.
Provide Tier II and Tier III escalation support for incidents the service desk cannot resolve.
Participate in an on-call rotation covering the time zones in which the mission operates.
Design and implement network changes through formal configuration control, including test plans, back-out plans, and post-change verification.
Engineer post network architectures, including site surveys, equipment refresh, bandwidth and capacity planning, and design decisions for constrained circuits.
Implement access control for sensitive network devices and hardening standards, and remediate scan and assessment findings within accreditation timelines.
Operate network monitoring, performance management, and configuration compliance tools to identify problems proactively.
Document designs, configurations, and runbooks so other engineers can sustain the work.
Travel occasionally in support of post work, as needed.