Network Engineer (DOS)

GES is seeking a Network Engineer to support the Defense Enclave Services (DES) program at Ft. Meade, MD. This position will focus on Lifecycle Replacement (LCR) activities for enterprise network infrastructure, including end-of-service (EOS) and end-of-life (EOL) technology refresh initiatives across the enterprise environment. 

The selected candidate will provide technical expertise for planning, staging, configuration, testing, implementation, and migration of enterprise network devices while ensuring compliance with DISA and DoD standards. This role is engineering-focused and is not responsible for incident management or operational Tier III escalation support.

Clearance Requirement

• Must hold an active Secret security clearance prior to start.
• Must be able to obtain and maintain a Top Secret clearance.
• US Citizenship required.

Primary Responsibilities

• Perform lifecycle replacement and technology refresh activities for enterprise network infrastructure.
• Engineer, configure, test, and implement routers, switches, and associated network devices in accordance with approved engineering standards and security requirements.
• Develop and execute Engineering Implementation Plans (EIPs), migration plans, validation procedures, and rollback procedures.
• Support network modernization and hardware refresh initiatives across enterprise environments.
• Coordinate and execute maintenance windows, circuit migrations, and cutover activities with internal teams and customer stakeholders.
• Validate network device configurations for compliance with DISA STIGs and organizational security requirements.
• Perform configuration management, software upgrades, and hardware replacement activities.
• Analyze network designs and recommend improvements related to reliability, scalability, and maintainability.
• Create and maintain technical documentation, implementation procedures, diagrams, and as-built documentation.
• Collaborate with architecture, cybersecurity, and operations teams to ensure successful transition and deployment activities.
• Support testing and validation of network connectivity, routing, switching, and security functionality during implementation activities.
• Participate in continuous process improvement initiatives and standardization efforts.
• Provide technical guidance and mentorship to junior engineers and implementation personnel.
• Support occasional after-hours maintenance activities and scheduled implementation windows.

Required Qualifications    

• Bachelor’s degree and 8+ years of related experience; additional years of experience may be considered in lieu of degree.
• DoD 8570 IAT Level II certification required prior to start (Security+ CE or equivalent).
• Advanced knowledge of enterprise routing and switching technologies.
• Experience implementing and supporting large-scale enterprise network infrastructure.
• Hands-on experience with routing protocols including BGP and OSPF.
• Experience with switching technologies including VLANs, STP, and Layer 2/Layer 3 network design.
• Strong understanding of IP networking, subnetting, and network troubleshooting methodologies.
• Experience performing network hardware refreshes, circuit migrations, and infrastructure modernization activities.
• Experience developing implementation plans, migration procedures, and technical documentation.
• Familiarity with DISA STIG compliance requirements and secure network configuration practices.
• Ability to coordinate and execute maintenance activities in a mission-focused enterprise environment.
• Ability to travel up to 25%, including potential OCONUS travel.
• Willingness to support scheduled after-hours maintenance windows as required.

Desired Qualifications    

• Previous experience supporting DISA or DoD enterprise network environments.
• Experience with Cisco, Juniper, Aruba, or Palo Alto network technologies.
• Relevant vendor certifications such as CCNP, JNCIP, Aruba ACP, or equivalent.
• Experience with automation, scripting, or infrastructure-as-code concepts.
• Familiarity with ITIL processes and change management practices.
• Experience supporting large-scale network migration or modernization efforts.
• Active CISSP, CCNP, or equivalent advanced certification.