Sr./Lead Network Engineer (MUST BE CLEARED SECRET)

Clearance: MUST HAVE AN ACTIVE SECRET CLEARANCE

Subsidiary: T&H Services

Job Title: Sr./Lead Network Engineer

Work Location: JBA/JBAB/The Pentagon

Hours: Monday – Friday, 10:00 – 18:00 (Core Shift) | On-Call / Operational Standby as needed

Labor Category: Full-Time | Exempt 

Pay Rate: $110,000 - $121,000 per year

Minimum/General Experience:

Five years’ experience analyzing, identifying, and resolving complex network hardware, circuit, and transmission logic problems. Experienced in the design, installation and acceptance testing of complex high-speed networks. Applies the principles of assessing and analyzing network transmission application to resolve reported malfunctions. Functional Responsibilities: Under minimum supervision designs and coordinates the installation and acceptance testing of the system network. Monitors network hardware operations to ensure properly set configuration options. Plans implementation of enhancements and upgrades to the network; performs cost/benefit studies of network configurations and recommends enhancements; directs acquisition, installation, and testing of network hardware; advises network users of hardware requirements, configurations, and limitations; and isolates, resolves, or circumvents network problems.

Education: A bachelor’s degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or business/finance Education and experience requirements may be substituted 1. Three years additional applicable experience may be substituted for a degree.

Position Overview:

The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cyber security hardening across unclassified (NIPR) and classified (SIPR) enterprise environments. Operating within a high-tempo defense architecture, this role ensures maximum network availability, rapid fault isolation, and strict alignment with Department of War (DoW) directives and operational security mandates.

Key Responsibilities:

• Serve as the primary alternate to the Team Lead; assume operational
  control of shift workflows, task allocation, and daily priorities in the Team Lead’s
  absenceMaintain continuous operational surveillance of enterprise network
  infrastructure and transport systems to identify real-time alerts, hardware alarms,
  and traffic anomalies.
• Triage, isolate, and remediate Layer 1 through Layer 3 network
  incidents using established Standard Operating Procedures (SOPs) and automated
  network scripts.Escalate complex, cross-domain, or multi-system outages to senior
  leadership and advanced engineering teams with comprehensive troubleshooting
  logs.Provision, deploy, configure, and optimize enterprise-class routers, multilayer
  switches, and associated network appliances to ensure performance and
  redundancy.Execute operating system upgrades (Cisco IOS/IOS-XE) and firmware
  refreshes across the fleet.Liaise directly with external telecommunications carriers
  and hardware vendors to troubleshoot circuit degradations, resolve carrier outages,
  and conduct loopback testing.
• Plan, coordinate, and execute Authorized Service Interruptions (ASIs) strictly adhering to command-directed change management
  processes.Enforce DoW and local command cybersecurity directives by applying
  Security Technical Implementation Guides (STIGs) and remediating IAVM/patching
  vulnerabilities.
• Program, maintain, and manage Type-1 Inline Network Encryptors (INE)
  (e.g., TACLANE) at network Points of Presence (PoPs) using GEM-X or adjacent DoD
  element management suites.Strictly adhere to and maintain DoD Communications
  Security (COMSEC) material handling, accountability, and two-person integrity
  protocols.
• Lead technical execution for site modernization initiatives, lifecycle tech
  refreshes, and special engineering projects.Participate in unit on-call rotation
  schedules to provide rapid surge support for critical operational
  outages.
• Qualifications/Experience:
• Bachelor’s degree in computer science, Information Technology, Network Engineering, or related STEM field with 5+ years of
  progressive network engineering experience; OREquivalent combination of formal
  military technical training, specialized certifications, and practical experience in lieu
  of a degree.
• Must hold and maintain an active DoD Secret clearance. Must meet DoD
  8140 IAT Level II or III baseline certification requirements: Cisco Certified Network
  Associate (CCNA) . CompTIA Security+ CE Optional Expert-level proficiency
  configuring and troubleshooting Virtual LANs (VLANs), VLAN Trunking Protocol (VTP),
  Port Security, Spanning Tree Protocol (STP/RSTP/MSTP), 802.1Q trunking, and L2/L3
  ether channels.
• Extensive hands-on experience designing, implementing, and
  diagnosing dynamic routing protocols, specifically EIGRP, OSPF, and ISIS.
  Demonstrated success troubleshooting physical (Layer 1) and data link (Layer 2)
  transport fabrics across both unclassified and classified enclaves.Hands-on
  experience configuring, keying, and administering KG-17XX series encryptors, HAIPE
  devices, and GEM-X management
  systems.
• Preferred Qualifications
• Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network
  access control and policy enforcement.Experience deploying and managing
  software-defined infrastructure using Cisco Catalyst Center (DNA Center).Prior
  operational familiarity with Air Force District of Washington (AFDW), Air Force
  National Capital Region (AFNCR), or unified Air Force communications
  architectures.Experience delivering enterprise IT and communications support within
  high-security National Capital Region (NCR) campuses, such as The Pentagon, Joint
  Base Andrews (JBA), or Joint Base Anacostia-Bolling (JBAB).