Sr./Lead Network Engineer (MUST BE CLEARED SECRET)

Tlingit Haida Tribal Business Corporation•Washington, DC

4d•$110,000 - $121,000•Onsite

About The Position

The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cybersecurity hardening across unclassified (NIPR) and classified (SIPR) enterprise environments. In a high-tempo defense architecture, the role supports maximum network availability, rapid fault isolation, and alignment with Department of War directives and operational security requirements. The role is based at JBA, JBAB, or The Pentagon, with a Monday–Friday core shift of 10:00–18:00 and on-call or operational standby as needed. Under minimum supervision, the engineer designs and coordinates installation and acceptance testing of system networks; monitors network hardware configuration and operations; plans network enhancements and upgrades; performs cost/benefit studies; directs acquisition, installation, and testing of hardware; advises users about hardware requirements and limitations; and resolves or works around network problems. The engineer also serves as the Team Lead’s primary alternate and may take operational control of shift workflows, task allocation, and daily priorities. The position is full-time and exempt, with a stated pay range of $110,000–$121,000 per year. An active DoD Secret clearance is required. A bachelor’s degree in a relevant field and at least five years of progressive network engineering experience are requested, although equivalent combinations of military technical training, certifications, and practical experience may be accepted, and the posting states that three additional years of applicable experience may substitute for a degree.

Requirements

At least five years of experience analyzing, identifying, and resolving complex network hardware, circuit, and transmission logic problems; experience designing, installing, and acceptance-testing complex high-speed networks.
Bachelor’s degree in computer science, information technology, network engineering, a related STEM field, or one of the broader fields listed in the posting; equivalent military technical training, certifications, and practical experience may be accepted. The posting also states that three additional years of applicable experience may substitute for a degree.
At least five years of progressive network engineering experience, or an equivalent combination of formal military technical training, specialized certifications, and practical experience in lieu of a degree.
Active DoD Secret clearance that must be maintained.
Meet DoD 8140 IAT Level II or III baseline certification requirements; CCNA is listed, and CompTIA Security+ CE is marked optional.
Expert-level ability to configure and troubleshoot VLANs, VTP, Port Security, STP/RSTP/MSTP, 802.1Q trunking, and Layer 2/Layer 3 EtherChannels.
Extensive hands-on experience designing, implementing, and diagnosing EIGRP, OSPF, and ISIS dynamic routing protocols.
Demonstrated success troubleshooting Layer 1 and Layer 2 transport fabrics across unclassified and classified enclaves.
Hands-on experience configuring, keying, and administering KG-17XX series encryptors, HAIPE devices, and GEM-X management systems.
Ability to follow DoD and command cybersecurity directives, COMSEC handling and accountability requirements, and two-person integrity protocols.

Nice To Haves

Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network access control and policy enforcement.
Experience deploying and managing software-defined infrastructure using Cisco Catalyst Center (DNA Center).
Operational familiarity with Air Force District of Washington (AFDW), Air Force National Capital Region (AFNCR), or unified Air Force communications architectures.
Experience delivering enterprise IT and communications support at high-security National Capital Region campuses, such as The Pentagon, JBA, or JBAB.

Responsibilities

Serve as the primary alternate to the Team Lead and assume control of shift workflows, task allocation, and daily priorities in the Team Lead’s absence.
Maintain operational surveillance of enterprise network infrastructure and transport systems, identifying alerts, hardware alarms, and traffic anomalies.
Triage, isolate, and remediate Layer 1 through Layer 3 network incidents using SOPs and automated network scripts.
Escalate complex, cross-domain, or multi-system outages to leadership and advanced engineering teams, providing troubleshooting logs.
Provision, deploy, configure, and optimize enterprise routers, multilayer switches, and associated network appliances.
Execute Cisco IOS/IOS-XE operating system upgrades and firmware refreshes.
Coordinate with telecommunications carriers and hardware vendors to troubleshoot circuit degradation, resolve outages, and conduct loopback testing.
Plan and execute Authorized Service Interruptions in accordance with command-directed change-management processes.
Apply DoW and local command cybersecurity directives, including STIG implementation and IAVM/patch vulnerability remediation.
Program, maintain, and manage Type-1 Inline Network Encryptors, such as TACLANE, at network Points of Presence using GEM-X or related DoD management suites.
Maintain COMSEC material handling and accountability and follow two-person integrity protocols.
Lead technical execution of site modernization, lifecycle technology refreshes, and special engineering projects.
Participate in unit on-call rotations to provide surge support for critical outages.
Design, coordinate, install, and acceptance-test system networks; monitor hardware configurations; plan upgrades; conduct configuration cost/benefit studies; direct hardware acquisition, installation, and testing; advise users; and isolate, resolve, or circumvent network problems.