Network Engineer

TekSynap•Washington, DC

6d•$85,000 - $110,000•Onsite

About The Position

TekSynap is seeking a Network Engineer to support Air Force National Capital Region (AFNCR) operations. The AFNCR IT Services program supports information systems for Headquarters Air Force, Air Force District of Washington, the Office of the Secretary of Defense, the Joint Chiefs of Staff, and other Air Force activities across the AFNCR, including the Pentagon, Joint Base Andrews, Joint Base Anacostia-Bolling, leased spaces, and alternate sites. Support areas include IT operations and maintenance; plans, projects, and engineering; and the National Military Command Center. Under minimum supervision, the Network Engineer designs, coordinates, installs, tests, maintains, and improves enterprise network infrastructure and transport systems. The role includes operating routers, multilayer switches, network appliances, and Type-1 encryptors; resolving network incidents; coordinating with carriers and vendors; implementing security requirements; and supporting modernization and lifecycle refresh projects. The position requires an active Secret clearance and U.S. citizenship. The position is based at Joint Base Anacostia-Bolling in Washington, DC, in an office environment with a medium noise level. The core schedule is Monday through Friday, 10:00–18:00, with an on-call/operational standby rotation. Evening and weekend work may be requested to meet program and contract needs. Travel is less than 10%.

Requirements

Active Secret security clearance.
U.S. citizenship.
Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related STEM field and 5+ years of progressive network engineering experience, or an equivalent combination of formal military technical training, specialized certifications, and practical experience in lieu of a degree.
Meet DoD 8140 IAT Level II or III baseline certification requirements; listed certifications are CCNA and CompTIA Security+ CE.
Optional expert-level proficiency configuring and troubleshooting VLANs, VTP, port security, STP/RSTP/MSTP, 802.1Q trunking, and Layer 2/Layer 3 EtherChannels.
Extensive hands-on experience designing, implementing, and diagnosing EIGRP, OSPF, and IS-IS dynamic routing protocols.
Demonstrated experience troubleshooting Layer 1 and Layer 2 transport fabrics across unclassified and classified enclaves.
Hands-on experience configuring, keying, and administering KG-17XX-series encryptors, HAIPE devices, and GEM-X management systems.
Ability to meet the physical demands described, including lifting up to 50 pounds and performing duties that involve standing, walking, sitting, climbing or balancing, and stooping, kneeling, crouching, or crawling.

Nice To Haves

Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network access control and policy enforcement.
Experience deploying and managing software-defined infrastructure using Cisco Catalyst Center (DNA Center).
Operational familiarity with Air Force District of Washington, Air Force National Capital Region, or unified Air Force communications architectures.
Experience delivering enterprise IT and communications support within high-security National Capital Region campuses, such as the Pentagon, Joint Base Andrews, or Joint Base Anacostia-Bolling.

Responsibilities

Design and coordinate system network installation and acceptance testing.
Monitor network hardware operations and ensure configuration options are set properly.
Plan network enhancements and upgrades, conduct cost-benefit studies, recommend improvements, and direct hardware acquisition, installation, and testing.
Advise network users on hardware requirements, configurations, and limitations; isolate, resolve, or work around network problems.
Control shift workflows, allocate tasks, and manage daily priorities in the Team Lead’s absence.
Maintain operational surveillance of enterprise network infrastructure and transport systems to identify alerts, hardware alarms, and traffic anomalies.
Triage, isolate, and remediate Layer 1 through Layer 3 incidents using established SOPs and automated network scripts.
Escalate complex, cross-domain, or multi-system outages to senior leadership and engineering teams with troubleshooting logs.
Provision, deploy, configure, and optimize enterprise routers, multilayer switches, and network appliances.
Execute Cisco IOS/IOS-XE operating system upgrades and fleet firmware refreshes.
Coordinate with telecommunications carriers and hardware vendors to troubleshoot circuit degradation, resolve outages, and conduct loopback testing.
Plan and execute Authorized Service Interruptions in accordance with command-directed change management processes.
Apply DoW and local command cybersecurity directives, including STIGs, and remediate IAVM and patching vulnerabilities.
Program, maintain, and manage Type-1 Inline Network Encryptors, such as TACLANE, at network Points of Presence using GEM-X or related DoD management suites.
Follow DoD COMSEC handling, accountability, and two-person integrity protocols.
Lead technical execution of site modernization, lifecycle technology refreshes, and special engineering projects.
Participate in unit on-call rotations to provide surge support for critical outages.