Principal Network Systems Engineer

We are seeking a Senior Principal Network Systems Engineer to design, build, and sustain highly available, mission-critical network environments across classified and unclassified infrastructures. This role combines advanced network engineering expertise with cybersecurity best practices to support complex operational systems requiring high reliability, security, and performance.

The ideal candidate will lead network architecture, implementation, modernization, and operational support efforts while partnering closely with cybersecurity, systems, software, and test engineering teams.

Responsibilities

• Design, implement, and maintain enterprise-scale network infrastructure supporting mission-critical operations.
• Develop network architectures, technical specifications, and engineering documentation.
• Plan and execute network upgrades, enhancements, migrations, and technology refresh initiatives.
• Configure and manage routers, switches, firewalls, gateways, VPNs, and related network technologies.
• Engineer and support core network services including DNS, DHCP, NTP, and authentication systems.
• Design segmented network environments that enforce security boundaries and controlled information sharing.
• Implement and optimize network security controls, including firewalls, ACLs, IDS/IPS, VPNs, and NAC solutions.
• Collaborate with cybersecurity teams to ensure compliance with RMF, ATO, STIG, and enterprise security requirements.
• Conduct network testing, validation, performance tuning, resiliency assessments, and failover exercises.
• Monitor network health, troubleshoot complex issues, and support operational incident response activities.
• Maintain accurate network diagrams, configuration baselines, and engineering documentation.
• Support NOC/SOC operations, change management processes, and service restoration activities.
• Perform physical infrastructure activities including fiber connectivity, patch management, and hardware deployment.
• Present technical recommendations, risks, trade-offs, and implementation strategies to stakeholders and leadership.

• Bachelor’s degree in Science, Technology, Engineering, or Mathematics (STEM) and 8 years of relevant professional or military engineering experience; OR
• Master’s degree in a STEM field and 6 years of relevant experience; OR
• Ph.D. in a STEM field and 4 years of relevant experience.
• DoD 8570 IAT Level II certification (Security+ CE or equivalent) prior to start date.

• Hands-on experience planning, implementing, operating, and troubleshooting routed and switched IP networks, including:

• IPv4, OSPF, VLANs, VPNs, and firewalls
• Microsoft and Linux system administration
• Cybersecurity fundamentals including hardening, secure configurations, and access control

Experience operating within mission-critical, real-time, or highly available network environments. Preferred Qualifications

• Experience serving as a lead network architect or principal engineer for enterprise deployments and major network transformations.
• Strong background in network design documentation including HLDs, LLDs, ICDs, routing plans, firewall policies, and operational runbooks.

• Expertise in enterprise networking technologies:

• Cisco Routing & Switching
• Firewalls and VPNs
• VMware vSphere, ESXi, and NSX

Advanced routing and switching knowledge including:

• VLAN/VXLAN
• Route filtering and convergence optimization
• QoS and traffic engineering
• MLAG and port-channel technologies

Cisco CCNP, CCIE, or equivalent certification preferred.

Experience supporting launch, test-range, weapons, defense, aerospace, or other real-time mission systems.

Advanced knowledge of core infrastructure services:

• DNS, DHCP, NTP
• AAA (RADITACACS+)
• DNSSEC and identity integration

Experience designing segmented and multi-domain network architectures with defined trust boundaries.

Knowledge of cross-domain solutions, data diodes, guards, and controlled information-sharing environments.

Experience implementing RMF, ATO, DISA STIG, and CIS benchmark requirements.

Proficiency with network automation and Infrastructure-as-Code tools such as:

• Ansible
• Python
• Bash
• PowerShell

Experience within Network Operations Center (NOC) and Security Operations Center (SOC) environments.

Strong troubleshooting skills across OSI Layers 1-7.

Experience leading network testing, failover validation, migration planning, and performance optimization initiatives.

Knowledge of VoIP, SIP, and converged voice/data networking environments.

Excellent communication and stakeholder-management skills., Networking: Cisco Routing & Switching, OSPF, VLANs, VXLAN, QoS, VPNs, Firewalls, Network Architecture

Virtualization: VMware vSphere, ESXi, NSX

Security: RMF, ATO, DISA STIGs, CIS Benchmarks, IDS/IPS, NAC, ACLs

Systems: Microsoft Windows, Linux Administration

Automation: Ansible, Python, Bash, PowerShell, Infrastructure as Code Operations: NOC, SOC, Incident Response, Network Monitoring, Performance Optimization By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge’s Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.