Network Engineer

MTSI is seeking a full-time Network Engineer located at Wright-Patterson AFB, Ohio. The Network Engineer will support the maintenance, optimization, and expansion of the current on-premise network environment while assisting with the design and integration of a pilot cloud enclave. This role will be responsible for ensuring stable network operations, routing and switching continuity, firewall integration, segmentation, IP address management, connectivity planning, and hybrid cloud readiness.

The candidate will work closely with cloud engineers, system engineers, DevOps personnel, cybersecurity staff, and program leadership to maintain current operations while preparing the network for cloud extension and eventual broader cloud adoption.

The ideal candidate has previously supported production enterprise networks and understands how to balance operational stability with modernization. They should be able to perform root cause analysis, explain technical issues clearly, document changes, and work effectively with system, cloud, security, and application teams.

Responsibilities:

Your essential job functions will include but may not be limited to:

• Maintain, troubleshoot, and expand enterprise on-premise network infrastructure.

• Support routing, switching, VLAN, VRF, firewall, VPN, load balancing, and network segmentation requirements.

• Assist with integration between the on-premise environment and pilot cloud enclave.

• Develop and maintain network diagrams, IP plans, port/protocol matrices, firewall rule documentation, and routing documentation.

• Support network connectivity for multi-tenant environments, backend systems, frontend access systems, storage systems, directory services, and management networks.

• Perform network configuration changes through formal change management processes.

• Troubleshoot packet loss, latency, asymmetric routing, MTU issues, DNS issues, TLS inspection issues, firewall policy issues, and routing failures.

• Support secure enclave design using segmentation, access control lists, firewall policies, VPNs, and zero-trust principles.

• Participate in migration planning, cutover events, test events, and rollback planning.

• Support monitoring, logging, and alerting for network performance and availability.

• Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements.

• Contribute to network standards, configuration baselines, and operational runbooks.

• Explain network risk, operational impact, and mitigation strategies.

• Mentor junior staff and participate in architecture reviews.

• Assist PM and System Administrators in procurement activities

• Assist in the planning for large-scale projects through vendor comparison and cost studies

• Create and deliver system status updates to customers and stakeholders

• TCP/IP, subnetting, routing, switching, NAT, PAT, VLANs, trunks, ACLs, QoS, and network segmentation.

• Dynamic routing protocols such as OSPF, BGP, EIGRP, or equivalent enterprise routing protocols.

• Firewall rule design, inter-zone traffic policy, VPN tunnels, and security boundary enforcement.

• Enterprise DNS, DHCP, NTP, IPAM, and certificate-aware network services.

• Hybrid connectivity concepts such as site-to-site VPN, private circuits, cloud gateways, and transit routing.

• Network troubleshooting using CLI tools and packet-level analysis.

• High availability network designs, including redundant links, routing failover, firewall HA, and load balancing.

• Change control, maintenance windows, implementation planning, and rollback execution.

• Network documentation suitable for operations, engineering review, security review, and leadership briefing.

• Strong documentation discipline.

• Comfortable working in maintenance windows and high-visibility operational environments.

• Ability to communicate clearly with technical and non-technical stakeholders.

• Candidates should have working knowledge of at least one or more of the following:

• Python for network automation and data parsing

• Ansible for network configuration management

• Bash or PowerShell for operational scripting

• YAML, JSON, Jinja2 templates

• Git-based configuration control

• Network tools including but not limited to: Ansible, Wireshark, Network Management Systems, Network configuration management, sflow/NetFlow, IPAM, and SDN.

• Linux experience.

• Self-starter with a strong sense of personal responsibility.

• 10 years' experience working as a Network Engineer or related field.

• Proficiency with Active Directory, domain controllers, IP addressing, DNS, remote access, VLANs, and VoIP systems

Education:

• Bachelor's degree in an IT-related field (e.g., cybersecurity, computer science, computer engineering).

Preferred certifications include:

• CompTIA Network+, Security+

• Cisco CCNA, CCNP, DevNet

• Azure Network Engineer, Google Professional Cloud Network Engineer, AWS Cloud Engineer

• VMware VCP, VCAP

• Red Hat RHCSA, RHCE

Even better if you have these desired skills:

• Cisco IOS, IOS-XE, NX-OS, Catalyst, Nexus

• Dell networking platforms

• Palo Alto firewalls

• Fortinet FortiGate

• Cisco ASA/Firepower

• Juniper SRX/EX/QFX

• F5 BIG-IP, NGINX, HAProxy, or other load balancers

• SolarWinds, PRTG, Zabbix, Nagios, Grafana, Elastic, Splunk, or equivalent monitoring tools

• Wireshark, tcpdump, nmap, netcat, traceroute, MTR

• Infoblox or similar IPAM/DNS/DHCP platforms

• Git, GitLab, GitHub, Bitbucket, or equivalent version control systems

• Visio, Draw.io, Lucidchart, Miro, or equivalent diagramming tools

• Experience managing AWS/Azure environments.

Clearance Requirements:

• Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).