Clearance: Secret Clearance
Location: Pearl Harbor, HI
Job Type: Full-Time
Target Salary Range*: $150,000 - $170,000
*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Senior Network Engineer provides engineering expertise and operational support for a large-scale enterprise intranet environment. This role leads efforts to identify, troubleshoot, analyze, and resolve complex network issues across enterprise network infrastructure, including switches, routers, VLANs, wireless access points, firewalls, and network sensors.

The Senior Network Engineer serves as a Tier III escalation resource and subject matter expert for complex incidents, network troubleshooting, configuration management, pre-production validation, and enterprise network changes. This role collaborates with engineering, operations, architecture, vendor, and program teams to enhance network availability, performance, reliability, and security.

Key Responsibilities

Network Engineering and Troubleshooting

• Lead efforts to identify, troubleshoot, analyze, and resolve complex network issues in a dynamic enterprise environment.
• Configure, maintain, and troubleshoot network infrastructure, including switches, routers, VLANs, wireless access points, firewalls, and network sensors.
• Provide engineering expertise and operational support for one of the world’s largest intranet environments.
• Serve as a Tier III escalation resource for complex incidents, coordinating with vendors as necessary for incident resolution.
• Serve as a subject matter expert and technical backstop for troubleshooting efforts involving multiple network disciplines and teams of CCNP/CCIE-level engineers.
• Troubleshoot technologies and protocols, including routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.

Network Security and Enterprise Collaboration

• Apply extensive knowledge of defense-in-depth principles to secure enterprise network infrastructure.
• Collaborate with cross-functional engineering and operations teams to enhance network availability, performance, reliability, and security.
• Participate in engineering, architecture, and project meetings to design and develop future enterprise network solutions.

Implementation Planning and Change Management

• Develop and maintain Engineering Implementation Plans supporting network changes and deployments.
• Create and manage change management tickets for deployments, maintenance activities, upgrades, and other network changes.
• Conduct Root Cause Analysis in support of problem management activities and recurring incident resolution.

Agile Delivery and Technical Communication

• Track engineering and operational work within an Agile/SAFe framework using Jira.
• Participate in Daily Stand-Ups, retrospectives, Program Increment activities, and other Agile ceremonies.
• Develop and deliver detailed demonstrations and technical updates supporting Program Increment objectives.

Configuration Baseline Management

• Maintain version-controlled configuration baselines for network infrastructure devices, including routers, switches, firewalls, and sensors.
• Maintain accurate records of startup and running configurations, firmware versions, security policies, and associated network configuration data.
• Ensure configuration changes are properly documented, peer-reviewed, approved, and backed up to a centralized repository.
• Maintain change-tracking and rollback capabilities to support operational resilience and configuration recovery.
• Ensure network configurations remain compliant with applicable DISA Security Technical Implementation Guides and organizational cybersecurity policies.

Lab Testing and Pre-Production Validation

• Conduct pre-production validation testing for firmware upgrades, configuration changes, and security patches before deployment to production networks.
• Perform testing within an isolated lab environment designed to mirror applicable production network topology and configurations.
• Validate network functionality, security policies and controls, device interoperability, performance against established baselines, and deployment and rollback procedures.
• Document testing results, identified risks, remediation requirements, and deployment recommendations prior to production implementation.

Qualifications

Education

• Bachelor’s degree with 8–12 years of relevant professional experience; or
• Master’s degree with 6–10 years of relevant professional experience.
• Equivalent education and experience substitutions may be considered at the Hiring Manager’s discretion.

Experience

• Subject matter expertise in BAN/LAN/WAN/WLAN and Network Boundary engineering. [Required]
• Extensive experience performing highly technical network maintenance, configuration, troubleshooting, and engineering activities. [Required]
• Experience providing Tier III escalation support in large-scale enterprise environments. [Required]
• Experience supporting networks of comparable scale to 16,000+ devices across 450+ geographically dispersed locations. [Required]
• Demonstrated ability to serve as a subject matter expert and escalation backstop for troubleshooting across multiple network disciplines. [Required]
• Extensive hands-on troubleshooting experience with routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast. [Required]
• Experience with SAFe Agile methodologies and Jira. [Required]

Skills

• Strong understanding of network security and defense-in-depth principles. [Required]
• Strong analytical and problem-solving capabilities. [Required]
• Excellent written and verbal communication skills. [Required]
• Ability to communicate complex technical concepts effectively to engineering teams, program leadership, customers, and other stakeholders. [Required]

Certifications

• DoD 8570.01 IAT Level III certification, such as CASP+, CISSP, CCNP Security, or another qualifying certification. [Required]
• Recognized network vendor certification, such as Cisco CCNA, CCNP, or CCIE. [Required]

Clearance

• Active Secret security clearance. [Required]
• Must be Top Secret eligible. [Required]

Other Requirements

• Willingness and ability to participate in an on-call rotation. [Required]
• Ability to perform scheduled and unscheduled work during off-hours, including maintenance windows, when required. [Required]
• Ability to travel up to 10%. [Required]

Preferred Qualifications

• Previous experience supporting the Navy Marine Corps Intranet network.
• Previous experience supporting Department of Defense programs and environments.
• Experience with network automation and Infrastructure as Code technologies and practices.
• Hands-on experience with automation technologies such as Ansible and Python.
• Experience with Arista networking technologies.
• Advanced Cisco networking certifications, including CCNP or CCIE.