Network Engineer-Secret

Sunayu•Washington, DC

4d•$89,000 - $115,000•Onsite

About The Position

The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cybersecurity hardening across unclassified (NIPR) and classified (SIPR) enterprise environments. The role supports a high-tempo defense architecture, maintaining network availability, isolating faults, and aligning operations with Department of War directives and operational security mandates. The position is based at Joint Base Anacostia-Bolling in Washington, D.C., with no travel or remote work. The core schedule is Monday through Friday, 10:00–18:00, with participation in an on-call and operational standby rotation. The engineer serves as the Team Lead’s primary alternate and may assume operational control of shift workflows, task allocation, and daily priorities in the Team Lead’s absence. Sunayu, LLC describes itself as a technology partner to the Defense and Intelligence communities. Its culture emphasizes collaboration, professional growth, and open communication. The company reimburses training and continuing education up to $5,000 per year and participates in industry conferences and events. Compensation is described as dependent on factors including responsibilities, experience, education and training, skills, and market and business considerations; no salary range is provided.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related STEM field, with five or more years of progressive network engineering experience; alternatively, equivalent formal military technical training, specialized certifications, and practical experience may be accepted in lieu of a degree.
Three additional years of applicable experience may be substituted for a degree.
Must hold and maintain an active DoD Secret clearance.
Must meet DoD 8140 IAT Level II or III baseline certification requirements; listed certifications include CCNA and CompTIA Security+ CE.
Five years of experience analyzing, identifying, and resolving complex network hardware, circuit, and transmission-logic problems.
Experience designing, installing, and acceptance-testing complex high-speed networks.
Ability to apply network transmission and application analysis principles to resolve reported malfunctions.
Proficiency configuring and troubleshooting VLANs, VTP, port security, STP/RSTP/MSTP, 802.1Q trunking, and Layer 2/Layer 3 EtherChannels.
Hands-on experience designing, implementing, and diagnosing EIGRP, OSPF, and ISIS dynamic routing protocols.
Demonstrated ability to troubleshoot physical Layer 1 and data-link Layer 2 transport fabrics across unclassified and classified enclaves.
Hands-on experience configuring, keying, and administering KG-17XX-series encryptors, HAIPE devices, and GEM-X management systems.
Ability to design and coordinate network installation and acceptance testing under minimum supervision.

Nice To Haves

Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network access control and policy enforcement.
Experience deploying and managing software-defined infrastructure using Cisco Catalyst Center (DNA Center).
Operational familiarity with Air Force District of Washington (AFDW), Air Force National Capital Region (AFNCR), or unified Air Force communications architectures.
Experience delivering enterprise IT and communications support at high-security National Capital Region campuses, such as The Pentagon, Joint Base Andrews, or Joint Base Anacostia-Bolling.

Responsibilities

Serve as the primary alternate to the Team Lead and assume operational control of shift workflows, task allocation, and daily priorities in the Team Lead’s absence.
Maintain continuous operational surveillance of enterprise network infrastructure and transport systems to identify alerts, hardware alarms, and traffic anomalies.
Triage, isolate, and remediate Layer 1 through Layer 3 network incidents using established SOPs and automated network scripts.
Escalate complex, cross-domain, or multi-system outages to senior leadership and advanced engineering teams with comprehensive troubleshooting logs.
Provision, deploy, configure, and optimize enterprise-class routers, multilayer switches, and associated network appliances.
Execute Cisco IOS/IOS-XE operating system upgrades and fleet firmware refreshes.
Work with telecommunications carriers and hardware vendors to troubleshoot circuit degradation, resolve carrier outages, and conduct loopback testing.
Plan, coordinate, and execute Authorized Service Interruptions (ASIs) in accordance with command-directed change-management processes.
Apply DoW and local command cybersecurity directives, including STIGs and IAVM/patching remediation.
Program, maintain, and manage Type-1 Inline Network Encryptors, such as TACLANE, at network Points of Presence using GEM-X or adjacent DoD element management suites.
Follow DoD COMSEC material-handling and accountability requirements, including two-person integrity protocols.
Lead technical execution of site modernization initiatives, lifecycle technology refreshes, and special engineering projects.
Participate in unit on-call rotations to provide rapid surge support for critical operational outages.
Design and coordinate system network installation and acceptance testing.
Monitor network hardware operations to ensure configuration options are properly set.
Plan network enhancements and upgrades; perform cost/benefit studies and recommend configuration enhancements.
Direct the acquisition, installation, and testing of network hardware.
Advise network users about hardware requirements, configurations, and limitations.
Isolate, resolve, or circumvent network problems.

Benefits

Three medical plan options
Dental and vision coverage
FSA, DCFSA, and HSA
Life and AD&D insurance
Short-term and long-term disability
Employee Assistance Program (EAP)
Training and educational assistance, including company-reimbursed training and continuing education up to $5,000 per year
Paid Time Off (PTO)
11 federal holidays
401(k) plan with up to a 6% match and immediate 100% vesting