Field Network Engineer - Hybrid,In Person

MSYS Inc.
Washington, United States of America
yesterday

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Washington, United States of America

Tech stack

LTE (Telecommunication)
Border Gateway Protocol
CompTIA Network+
Data Centers
Disaster Recovery
Dynamic Multipoint Virtual Private Networks
Enhanced Interior Gateway Routing Protocol
Networking Hardware
IP Addressing
Internet Protocol Security (IP SEC)
Virtual Private Networks (VPN)
Python
Network Troubleshooting
Network Layer
Uptime
Network Architecture
Network Connections
Network Planning and Design
Network Monitoring
Network Segmentation
Open Shortest Path First
Ansible
Virtual Local Area Networks
Dynamic Routing
Scripting (Bash/Python/Go/Ruby)
Information Technology
Firewall Services Module
Open Network Automation Platform
IoT Security
Cisco networks
Vulnerability Analysis

Job description

The Client is seeking a hands-on Field Network Engineer to serve as a senior technical resource within the Intelligent Transportation Systems (ITS) program. This role is responsible for the design, deployment, and day-to-day operations of a secure, highly available ITS network connecting traffic signals, video surveillance systems, and IoT devices across the District of Columbia. The network environment leverages Metro Ethernet services as the transport underlay and a Cisco DMVPN secure overlay to link distributed field sites back to DDOT''s headend facilities and data centers. The engineer will work in both field and datacenter environments, with a focus on uptime, safety, and reliability in mission-critical operations., DMVPN & Secure Overlay Networking

  • Deploy and support Cisco DMVPN (Phase 2/Phase 3) hub-and-spoke and spoke-to-spoke overlay networks across Metro Ethernet transport.
  • Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces for the DMVPN fabric.
  • Implement dynamic routing protocols (BGP, OSPF, EIGRP) over DMVPN tunnels to support automated failover and optimal path selection.
  • Design failover and redundancy strategies, including LTE/5G backup paths, to ensure uninterrupted connectivity during circuit or equipment outages.
  • Monitor tunnel health, latency, and throughput to maintain performance standards across all VPN connections.

Metro Ethernet & WAN Transport

  • Coordinate with service providers on Metro Ethernet circuit provisioning (E-Line, E-LAN), turn-up, and incident resolution.
  • Manage dual-WAN redundancy models and carrier handoff configurations at each site.
  • Perform field installations and cutovers of routers, switches, cabinets, and handoff equipment.

Network Engineering & Operations

  • Manage VLAN configurations, IP addressing schemes, and Layer 2/Layer 3 connectivity between remote aggregation points and headend data centers.
  • Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains.
  • Apply and tune QoS policies to prioritize latency-sensitive traffic such as signal control and video.
  • Troubleshoot network issues end-to-end from field site through WAN transport to data center.
  • Maintain accurate network documentation including diagrams, IP assignments, equipment inventories, and configuration records.

ITS Infrastructure Support

  • Support Dot''s traffic signal control systems, CCTV/video surveillance platforms, and IoT field devices by ensuring reliable, low-latency transport connectivity.
  • Coordinate field cabinet upgrades to accommodate new network equipment, including power and environmental requirements.
  • Manage the migration of remote aggregation points from legacy infrastructure to modern DMVPN-based transport.
  • Monitor network performance, availability, and service-level compliance across all ITS transport links.

Security & Compliance

  • Ensure all network connections utilize encrypted communications per DDOT and District government security policies.
  • Manage VPN certificate lifecycles, key rotation, and trust domain configurations.
  • Implement IoT security and segmentation best practices for field-deployed devices.
  • Support security audits, vulnerability assessments, and remediation efforts on ITS network infrastructure.

Requirements

  • Combination of field work (street-level cabinets, utility corridors), data center operations, and remote support.
  • Travel to field locations across the District required; valid driver''s license required.
  • Ability to lift and rack network equipment up to 50 lbs.
  • Participation in scheduled maintenance windows and on-call availability for after-hours emergency response., * Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field (or equivalent professional experience). Required 15 Years
  • Conveying technical and functional concepts for a specific technical specialty Required 11 Years
  • Preparing complex technical documentation Required 11 Years
  • Experience with Intelligent Transportation Systems (ITS) including traffic signal controllers, CCTV/video surveillance transport, and traffic manageme Required 11 Years
  • Experience with LTE/5G failover solutions Required 7 Years
  • Network automation skills using Ansible or Python-based scripting. Required 11 Years
  • Knowledge of IoT security and segmentation best practices. Required 5 Years
  • Knowledge of high-availability network design, redundant architectures, and disaster recovery planning. Required 8 Years
  • Fiber optic network experience - including single-mode fiber design, SFP/SFP+ transceivers Required 11 Years
  • Prior experience working with a state or municipal Department of Transportation. Required 10 Years
  • Active CCNA Certification Required
  • CCIE Enterprise Infrastructure, Certified Fiber Optic Technician (CFOT) or equivalent, * CompTIA Network+ or Security+ ITIL v4 Foundation

Apply for this position