Principal Network Engineer

Principal Network Engineer

LOCATION: Hanscom AFB, Bedford, MA

JOB STATUS: Full-time

CLEARANCE: Secret

Salary Range: 150-180k dependent upon customer requirements when position is awarded

TRAVEL: CONUS and OCONUS

Astrion has an exciting opportunity for a Principal Network Engineer providing support to the EPASS HB contract at Hanscom AFB.

We anticipate this role becoming available to start in December 2025.

QUALIFICATIONS:

• Must have and be able to maintain an active Secret level clearance
• Must be a US citizen
• Clear understanding of Air Force Engineering, specifically network and communications.

PREFERRED QUALIFICATIONS:

• Bachelor's or Master's Degree
• 20+ years of experience with 12+ years of DoD related experience

RESPONSIBILITIES:

• Conduct program portfolio reviews to evaluate/recommend alternative plans, improve engineering processes, sustain program baselines, and validate system-level performance in accordance with specifications.

• Prepare technical documentation to define and recommend system/subsystem characteristics; produce management reports and technical presentations for planning, implementation, and corrective actions.

• Perform validation of systems, including development of criteria and procedures, and evaluate end-to-end communications (from sensor/source through C2 nodes to end users).

• Provide technical training, program engineering support, and integration/sustainment services for acquisition, deployment/fielding, and operations oversight.

• Analyze and recommend network requirements, architectures, and infrastructure.

• Monitor and analyze network workload, capacity, and performance.

• Diagnose and resolve network problems, ensuring continuity of operations.

• Recommend and implement backup/recovery procedures.

• Install, test, maintain, and upgrade network operating systems software.

• Ensure rigorous application of cybersecurity policies and practices.

• Support Agile software execution with Government and prime contractors.

• Support development of service-oriented architectures for software development.

• Provide life cycle network engineering support for sustainment activities.

• Create, update, and maintain detailed network design diagrams (Visio) with implementation details (cables, ports, buildings).

• Collect/analyze operational data to estimate availability and recovery factors.

• Maintain information on service level agreements (SLAs) and POCs for each pathway.

• Provide oversight for acquisition and configuration of network management systems.

• Support troubleshooting and infrastructure upgrades during operational mode.

• Configure and troubleshoot network/security technologies: VPN, DMVPN, GRE, IPsec, MACSec/Cisco TrustSec, ACLs, traffic flows, L2/L3 separation, fragmentation.

• Manage performance parameters: QoS, load balancing, multi-chassis ether channel, stateful switchover, nonstop routing/forwarding, graceful restarts, MTU, policing.

• Implement and troubleshoot protocols: Unicast/Multicast, BGP, EIGRP, IS-IS, OSPF, RTP, RSTP, STP, MPLS, LDP, VoIP, SNMP.

• Understand/document network failure identification and recovery procedures.

• Develop repeatable methods to test network pathways for performance and failure identification.

• Provide oversight for High Assurance Internet Protocol Encryptor (HAIPE) acquisition, configuration, and remote management systems.

• Understand security boundary designs (e.g., Cross Domain Solutions).

• Facilitate DISA engineering for communications pathways using Commercial Ethernet Gateway architectures.

• Assist in the acquisition of DISA point-to-point circuits.