Mid - System Engineer (w/ active Secret)

Critical Solutions•Pearl Harbor, HI

3d•$99,000 - $128,000•Onsite

About The Position

Critical Solutions is seeking a Mid-level Systems Engineer to support a large-scale, geographically dispersed enterprise network environment. The role provides engineering and operational support across LAN/WAN/WLAN, network boundary engineering, routing, switching, network security, and Tier III troubleshooting. The engineer serves as a technical resource and escalation point for complex network issues and supports engineering, configuration management, change management, lab validation, and development of future enterprise network solutions. The position is onsite in Pearl Harbor, Hawaii, with alternate locations in Whidbey Island or Norfolk, Virginia. The regular schedule is Wednesday through Sunday. The role requires an active DoD Secret clearance, Top Secret eligibility, U.S. citizenship, willingness to join an on-call rotation, availability for scheduled and unscheduled off-hours work when needed, and up to 10% travel.

Requirements

Bachelor's degree and master's degree, or equivalent education and experience substitutions at the Hiring Manager's discretion.
Active DoD Secret security clearance; must be eligible for Top Secret clearance.
U.S. citizenship; selected candidate must undergo and pass the federal agency background investigation and fingerprinting process.
DoD 8570.01 IAT Level II certification, such as Security+ CE, CCNA-Security, GICSP, or another qualifying certification.
Subject matter expertise in BAN/LAN/WAN/WLAN and network boundary engineering.
Extensive experience performing technical network maintenance, configuration, troubleshooting, and engineering activities.
Experience providing Tier III escalation support in large-scale enterprise environments.
Experience supporting networks comparable in scale to 16,000 or more devices across 450 or more geographically dispersed locations.
Demonstrated ability to serve as a subject matter expert and escalation backstop across multiple network disciplines.
Hands-on troubleshooting experience with routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
Experience with SAFe Agile methodologies and JIRA.
Strong understanding of network security and defense-in-depth principles.
Strong analytical and problem-solving capabilities.
Excellent written and verbal communication skills, including the ability to explain complex technical concepts to engineering teams, program leadership, customers, and stakeholders.
Willingness and ability to participate in an on-call rotation and perform scheduled and unscheduled off-hours work when required.
Ability to travel up to 10%.

Nice To Haves

DoD 8570.01 IAT Level III certification, such as CASP+, CISSP, CCNP Security, or another qualifying certification.
Top Secret eligibility.
Previous experience supporting the Navy Marine Corps Intranet (NMCI) network.
Previous experience supporting Department of Defense programs and environments.
Experience with network automation and Infrastructure as Code technologies and practices.
Hands-on experience with Ansible and Python.
Experience with Arista networking technologies.
Advanced Cisco networking certifications, including CCNP or CCIE.

Responsibilities

Identify, troubleshoot, analyze, and resolve complex network issues in an enterprise environment.
Configure, maintain, and troubleshoot network infrastructure, including switches, routers, VLANs, wireless access points, firewalls, and network sensors.
Provide engineering expertise and operational support for a large intranet environment.
Provide Tier III escalation support for complex incidents and coordinate with vendors as needed.
Serve as a subject matter expert and technical backstop for troubleshooting across multiple network disciplines and teams.
Apply defense-in-depth principles to secure enterprise network infrastructure.
Troubleshoot routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.
Collaborate with engineering and operations teams to improve network availability, performance, reliability, and security.
Develop and maintain Engineering Implementation Plans for network changes and deployments.
Create and manage change management tickets for deployments, maintenance, upgrades, and other network changes.
Conduct Root Cause Analysis for problem management and recurring incident resolution.
Participate in engineering, architecture, and project meetings to design future enterprise network solutions.
Track engineering and operational work in JIRA within an Agile/SAFe framework; participate in stand-ups, retrospectives, Program Increment activities, and other Agile ceremonies.
Develop and deliver demonstrations and technical updates supporting Program Increment objectives.
Maintain version-controlled configuration baselines and accurate configuration, firmware, security policy, and network data for infrastructure devices.
Ensure configuration changes are documented, peer-reviewed, approved, and backed up to a centralized repository; maintain change-tracking and rollback capabilities.
Maintain network configuration compliance with applicable DISA STIGs and organizational cybersecurity policies.
Validate firmware upgrades, configuration changes, and security patches in an isolated lab environment before production deployment.
Test network functionality, security controls, interoperability, performance, and deployment and rollback procedures; document results, risks, remediation needs, and recommendations.
Participate in an on-call rotation and perform scheduled or unscheduled off-hours work, including maintenance windows, when required.
Travel up to 10%.