Network Engineer-Secret

Sunayu•Washington, DC

3d•Onsite

About The Position

The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cybersecurity hardening across unclassified (NIPR) and classified (SIPR) enterprise environments. Working in a high-tempo defense architecture, the role supports network availability, fault isolation, and compliance with Department of War directives and operational security requirements. The position is based at Joint Base Anacostia-Bolling in Washington, D.C., and requires an active DoD Secret clearance. The core schedule is Monday through Friday, 10:00–18:00, with participation in an on-call and operational standby rotation. The engineer serves as the primary alternate to the Team Lead, taking operational control of shift workflows, task allocation, and daily priorities when needed. The role includes monitoring infrastructure and transport systems; troubleshooting incidents across Layers 1–3; configuring and maintaining enterprise routers, switches, and network appliances; coordinating with carriers and vendors; and planning authorized service interruptions. The engineer also applies cybersecurity hardening and patching, manages Type-1 inline network encryptors and COMSEC materials, and leads site modernization, technology refresh, and special engineering projects. Sunayu, LLC describes itself as a technology partner to the Defense and Intelligence communities. The company emphasizes collaboration, professional growth, and open communication, and offers company-reimbursed training and continuing education up to $5,000 per year, along with participation in industry conferences and events.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related STEM field and 5+ years of progressive network engineering experience, or an equivalent combination of formal military technical training, specialized certifications, and practical experience in lieu of a degree; three additional years of applicable experience may substitute for a degree.
Active DoD Secret clearance, which must be maintained.
Meet DoD 8140 IAT Level II or III baseline certification requirements; CCNA and CompTIA Security+ CE are listed.
Expert-level proficiency configuring and troubleshooting VLANs, VTP, Port Security, STP/RSTP/MSTP, 802.1Q trunking, and Layer 2/Layer 3 EtherChannels.
Extensive hands-on experience designing, implementing, and diagnosing EIGRP, OSPF, and ISIS routing protocols.
Demonstrated experience troubleshooting physical Layer 1 and data link Layer 2 transport fabrics across unclassified and classified enclaves.
Hands-on experience configuring, keying, and administering KG-17XX series encryptors, HAIPE devices, and GEM-X management systems.
Five years’ experience analyzing, identifying, and resolving complex network hardware, circuit, and transmission logic problems.
Experience designing, installing, and acceptance-testing complex high-speed networks.
Ability to apply network transmission and application principles to resolve reported malfunctions.
Ability to work under minimum supervision on network design, installation coordination, and acceptance testing.

Nice To Haves

Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network access control and policy enforcement.
Experience deploying and managing software-defined infrastructure using Cisco Catalyst Center (DNA Center).
Operational familiarity with Air Force District of Washington (AFDW), Air Force National Capital Region (AFNCR), or unified Air Force communications architectures.
Experience supporting enterprise IT and communications in high-security National Capital Region campuses, such as The Pentagon, Joint Base Andrews, or Joint Base Anacostia-Bolling.

Responsibilities

Serve as the primary alternate to the Team Lead and assume operational control of shift workflows, task allocation, and daily priorities in the Team Lead’s absence.
Maintain operational surveillance of enterprise network infrastructure and transport systems to identify alerts, hardware alarms, and traffic anomalies.
Triage, isolate, and remediate Layer 1 through Layer 3 network incidents using SOPs and automated network scripts.
Escalate complex, cross-domain, or multi-system outages to senior leadership and advanced engineering teams, providing troubleshooting logs.
Provision, deploy, configure, and optimize enterprise routers, multilayer switches, and network appliances.
Execute Cisco IOS/IOS-XE operating system upgrades and fleet firmware refreshes.
Coordinate with telecommunications carriers and hardware vendors to troubleshoot circuit degradation, resolve outages, and conduct loopback testing.
Plan and execute Authorized Service Interruptions in accordance with command-directed change management processes.
Apply DoW and local command cybersecurity directives, implement STIGs, and remediate IAVM and patching vulnerabilities.
Program, maintain, and manage Type-1 Inline Network Encryptors, such as TACLANE, at network Points of Presence using GEM-X or adjacent DoD management suites.
Follow DoD COMSEC material handling, accountability, and two-person integrity protocols.
Lead technical execution of site modernization initiatives, lifecycle technology refreshes, and special engineering projects.
Participate in unit on-call rotations to provide surge support for critical operational outages.
Design and coordinate system network installation and acceptance testing.
Monitor network hardware operations and ensure configuration options are properly set.
Plan network enhancements and upgrades, perform cost-benefit studies, recommend enhancements, and direct network hardware acquisition, installation, and testing.
Advise network users on hardware requirements, configurations, and limitations, and isolate, resolve, or circumvent network problems.