Network Engineer II

Feditc Llc
Joint Base Andrews, United States of America
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 105K

Job location

Joint Base Andrews, United States of America

Tech stack

Border Gateway Protocol
VoIP
Cisco Unified Communications Manager
Network Analysis
Enhanced Interior Gateway Routing Protocol
Internet Protocol Security (IP SEC)
Python
Network Security
Network Architecture
Network Diagrams
Network Planning and Design
Network Monitoring
Routing
Open Shortest Path First
Ansible
Satcom
Virtualization Technology
Data Logging
Identity Services Engine
SC Clearance
SolarWinds (Software)
Palo Alto Networks
Open Network Automation Platform
Splunk
Cisco networks
VMware

Job description

FEDITC is seeking a Network Engineer II to work on-site at Scott AFB. The selected candidate shall provide network analysis, design, implementation, and troubleshooting services to engineer, evaluate, and recommend secure network solutions that meet mission requirements and optimize network/system performance. This position supports secure, multi-transport hub-and-spoke architectures in direct support of deployable aviation platforms and ground network environments. A Secret clearance and U.S. citizenship are required to be considered for the position. Responsibilities: The Network Engineer II is responsible for the design, implementation, testing, operations, and maintenance of secure enterprise and deployable network architectures. Specific responsibilities include:

  • Engineer and maintain Cisco IOS-XE routing platforms in complex hub-and-spoke environments
  • Implement and troubleshoot IKEv2/IPSEC (FlexVPN) secure overlay architectures
  • Design and support Front-Door VRF (FVRF) architectures for multi-transport WAN environments
  • Configure and validate BGP peering, route filtering (prefix-lists/route-maps), and community-based policy control
  • Support integration and troubleshooting with Type I encryption devices (e.g., TACLANE KG-175 series)
  • Analyze and resolve Security Association (SA) establishment and encrypted traffic flow issues
  • Validate traffic symmetry and PACE-based failover behavior across multiple transport paths
  • Build and replicate production scenarios in lab environments (GNS3, CML, virtual routers) prior to deployment
  • Develop and execute structured test plans for new integrations, enhancements, and issue reproduction
  • Provide advanced troubleshooting across routing, encryption, transport, and policy layers
  • Produce clear, structured technical documentation and network diagrams
  • Collaborate across engineering, operations, and mission stakeholders to support secure communications environments

Requirements

  • Cisco IOS-XE routers and switches
  • Palo Alto firewalls
  • General Dynamics TACLANE KG-175 series (Type I encryption devices)
  • BGP, OSPF, and EIGRP routing protocols
  • IPSEC / IKEv2 / FlexVPN architectures
  • Multi-transport WAN architectures (commercial SATCOM familiarity preferred)
  • Network monitoring and logging platforms (Splunk, SolarWinds)
  • VMware virtualized environments
  • Cisco Identity Services Engine (ISE)
  • Spectracom SecureSync (NTP servers)
  • Cisco voice technologies (CUCM, CUBE, CME) - familiarity preferred

Technical Skills:

  • Strong understanding of hub-and-spoke network design principles
  • Experience implementing secure encrypted overlays across diverse transport mediums
  • Advanced troubleshooting of IPSEC/IKEv2 and BGP interactions
  • Experience implementing route filtering and policy enforcement using prefix-lists and route-maps
  • Ability to analyze routing asymmetry and traffic path selection
  • Familiarity with multi-transport resiliency models and PACE-based routing strategies
  • Ability to independently design, test, validate, and implement network changes
  • Strong analytical and problem-solving skills
  • Strong and ample experience documenting and diagramming network architectures
  • Exposure to network automation frameworks (Python, Ansible, structured configuration templates) - strongly preferred

Education:

  • BA/BS + 7 years of experience

Certifications:

  • CCNP Required
  • Must meet 8140 IAT II certification

Desired:

  • CCIE, CISSP, Palo Alto certifications, Cisco voice/security certifications

Clearance:

  • A Secret clearance and U.S. Citizenship are required to be considered for the position.

Benefits & conditions

Pulled from the full job description

  • 401(k)
  • Health insurance
  • Paid time off
  • Employee discount
  • Vision insurance
  • Dental insurance
  • Flexible spending account, * Medical
  • Dental
  • Vision
  • 401K
  • Paid Time Off (PTO)
  • Life and Disability Insurance
  • Employee Assistance Program
  • Flexible Spending Accounts (FSA)
  • Dependent Care Reimbursement Program
  • Group Term Life Insurance
  • Supplemental Life and A&D Insurance
  • Short & Long Term Disability
  • Life Discount Program

About the company

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Apply for this position