Mid - System Engineer (w/ active Secret)

Critical Solutions•Pearl Harbor, HI

1d•Onsite

About The Position

Critical Solutions is seeking a mid-level Systems Engineer to support a large-scale, geographically dispersed enterprise network environment. The position serves as a technical resource and Tier III escalation point for complex network issues while supporting network engineering, configuration management, change management, lab validation, and development of future enterprise network solutions. The role is onsite in Pearl Harbor, Hawaii, with alternate locations in Whidbey Island or Norfolk, Virginia, and follows a Wednesday–Sunday schedule. The engineer will work across LAN/WAN/WLAN, network boundary engineering, routing, switching, network security, and troubleshooting. Responsibilities include supporting network infrastructure and applying defense-in-depth principles in a large enterprise environment. The position also maintains configuration baselines and validates proposed changes in an isolated lab environment before production deployment, ensuring configurations meet applicable DISA STIGs and organizational cybersecurity policies. The position requires an active DoD Secret clearance and U.S. citizenship. The selected candidate must undergo a federal background investigation and fingerprinting and be eligible for Top Secret clearance. The role involves on-call rotation, off-hours work when required, and travel up to 10%. Salary for Pearl Harbor is listed as $99,000–$128,000; the range may vary by location and does not guarantee a specific salary. Compensation considers factors including responsibilities, education, experience, skills, and certifications.

Requirements

Bachelor's degree and master's degree, or equivalent education and experience substitutions at the Hiring Manager's discretion.
Active DoD Secret security clearance; must be eligible for Top Secret clearance.
DoD 8570.01 IAT Level II certification, such as Security+ CE, CCNA-Security, GICSP, or another qualifying certification.
Subject matter expertise in BAN/LAN/WAN/WLAN and network boundary engineering.
Extensive experience performing technical network maintenance, configuration, troubleshooting, and engineering.
Experience providing Tier III escalation support in large-scale enterprise environments.
Experience supporting networks comparable in scale to 16,000+ devices across 450+ geographically dispersed locations.
Demonstrated ability to serve as a subject matter expert and troubleshooting escalation backstop across multiple network disciplines.
Extensive hands-on troubleshooting experience with routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
Experience with SAFe Agile methodologies and JIRA.
Strong understanding of network security and defense-in-depth principles.
Strong analytical and problem-solving capabilities.
Excellent written and verbal communication skills, including the ability to explain complex technical concepts to engineering teams, program leadership, customers, and other stakeholders.
U.S. citizenship.
Willingness and ability to participate in an on-call rotation and perform off-hours work when required.
Ability to travel up to 10%.

Nice To Haves

DoD 8570.01 IAT Level III certification, such as CASP+, CISSP, CCNP Security, or another qualifying certification.
Previous experience supporting the Navy Marine Corps Intranet (NMCI) network.
Previous experience supporting Department of Defense programs and environments.
Experience with network automation and Infrastructure as Code technologies and practices.
Hands-on experience with Ansible and Python.
Experience with Arista networking technologies.
Advanced Cisco networking certifications, including CCNP or CCIE.

Responsibilities

Identify, troubleshoot, analyze, and resolve complex network issues in an enterprise environment.
Configure, maintain, and troubleshoot switches, routers, VLANs, wireless access points, firewalls, and network sensors.
Provide engineering expertise and operational support for a large intranet environment.
Serve as a Tier III escalation resource for complex incidents and coordinate with vendors as needed.
Act as a subject matter expert and technical backstop for troubleshooting across multiple network disciplines and engineering teams.
Apply defense-in-depth principles to secure enterprise network infrastructure.
Troubleshoot routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
Collaborate with engineering and operations teams to improve network availability, performance, reliability, and security.
Develop and maintain Engineering Implementation Plans for network changes and deployments.
Create and manage change-management tickets for deployments, maintenance, upgrades, and other network changes.
Conduct root cause analysis for problem management and recurring incident resolution.
Participate in engineering, architecture, and project meetings to design future enterprise network solutions.
Track engineering and operational work in JIRA within an Agile/SAFe framework; participate in stand-ups, retrospectives, Program Increment activities, and other Agile ceremonies.
Develop and deliver demonstrations and technical updates supporting Program Increment objectives.
Maintain version-controlled configuration baselines for network devices, including routers, switches, firewalls, and sensors.
Maintain records of device configurations, firmware versions, security policies, and related network configuration data.
Ensure configuration changes are documented, peer-reviewed, approved, and backed up to a centralized repository; maintain change tracking and rollback capabilities.
Ensure network configurations comply with applicable DISA STIGs and organizational cybersecurity policies.
Validate firmware upgrades, configuration changes, and security patches in an isolated lab environment before production deployment.
Test functionality, security controls, interoperability, performance against baselines, and deployment and rollback procedures; document results, risks, remediation requirements, and recommendations.
Participate in an on-call rotation and perform scheduled or unscheduled off-hours work, including maintenance windows, when required.
Travel up to 10%.