Network Engineer

Booz Allen Hamilton•Annapolis Junction, MD

3d•$77,600 - $176,000•Remote

About The Position

You’ll build and sustain the networks that keep national security missions connected. From enterprise routing to wireless design and firewall hardening, you’ll own the engineering that makes data flow reliably and securely between mission sites. As part of a tight technical team, you’ll shape architectures that support 24/7 operations, including high-availability LAN/WANs, encrypted inter-site links, and resilient wireless backbones. You’ll diagnose complex issues before they impact users, modernize outdated infrastructure, and implement smarter automation to keep performance sharp. We work where precision and reliability matter most. Every change you design improves how defense networks communicate, defend, and adapt.

Requirements

5+ years of experience as a Network Engineer, supporting enterprise or mission environments
3+ years of experience configuring and maintaining routing and switching, including BGP, OSPF, STP, VLANs, and VRFs
3+ years of experience deploying and managing firewalls and VPNs such as Palo Alto, Fortinet, Cisco ASA, or Firepower
3+ years of experience designing or maintaining enterprise wireless, including Cisco WLC, Aruba, and Meraki
Experience with DNS, IP addressing, and redundant architectures for HA operations
Experience with DoD STIGs and security compliance frameworks
Secret clearance
HS diploma or GED
IAT Level II CompTIA Security+ CE Certification

Nice To Haves

Experience integrating Type 1 cryptographic devices, TACLANEs, or key-management systems
Experience in voice or collaboration, including QoS, CUCM, and SIP
Experience with SD-WAN or SASE solutions such as Cisco Viptela, Versa, and Meraki
Experience with wireless site surveys and RF optimization, including Ekahau and AirMagnet
Bachelor’s degree in Information Systems, CS, or a related field
CCNP Enterprise, PCNSE, or ACMP Certification

Responsibilities

Engineer and optimize multi-site LAN/WAN and WLAN architectures using Cisco IOS-XE, Juniper EX/MX, and Aruba controllers.
Deploy and maintain next-gen firewalls and VPNs such as Palo Alto, Fortinet, Cisco ASA, or Firepower, to enforce Zero Trust boundaries.
Integrate encryption devices and redundant routing to ensure mission-critical availability.
Monitor and tune network performance using SolarWinds, NetFlow, and Wireshark analytics.
Implement segmentation, VRFs, and secure VLAN structures aligned with DoD STIGs and IA controls.
Collaborate across system and security teams to deliver secure, high-speed connectivity for classified environments.