Network Engineer #11755

As a Network Engineer, you will play a vital role in the implementation and enforcement of advanced network security measures across multiple base locations. Your core duties will involve ownership of switching infrastructure tasks, notably building and deploying 802.1X/ MAB configurations, validating those deployments, and managing rollback procedures. The work will be guided by a project team which will define specific deliverables. This role demands a high level of on-site engagement and frequent travel.

Essential Skills, Experience

• Review and analyze switch inventory, firmware, and configurations to assess readiness for 802.1X, MAB, and CoA, identifying non-capable or end-of-life equipment.
• Develop standardized 802.1X/MAB configuration templates and deploy them methodically across facilities, utilizing rollback strategies as needed.
• Address the configuration needs of special network ports for devices such as IP phones, daisy-chained PCs, printers, IoT devices, and other exceptions requiring MAB or specialized handling.
• Configure AAA/RADIUS/TACACS+, as well as VLAN assignments, including functions like quarantine/remediation and implementation of DHCP snooping.
• Support both monitor mode and enforcement waves, and provide real-time troubleshooting for connectivity issues and deployment challenges.
• Configure wireless authentication protocols where identified within project scope.
• Document as-built configurations, create and maintain backup files, and update associated network diagrams and operational documentation.
• Work closely with technical leads/project teams to reflect and support defined deliverables.
• Comfortable working in network closets and performing implementation activity during after-hours change windows, as dictated by site operations.
• Travel up to 75% of the time to project sites within the continental United States.

• 5 to 8 years of experience in campus networking environments, including at least 3 years deploying 802.1X/MAB authentication on both wired and wireless infrastructure.
• Active Secret security clearance.
• Demonstrated hands-on experience deploying and troubleshooting 802.1X, MAB, and CoA solutions in production campus networks.
• In-depth configuration and troubleshooting skills for enterprise switches, commonly Cisco IOS/IOS-XE, covering AAA, VLANs, DHCP snooping, Dynamic ARP Inspection (DAI), and port security.
• Experience with large-scale (hundreds of devices) bulk configuration deployments and rollbacks, utilizing Ansible, Python (Netmiko), or other network configuration management tools.
• Experience working in high-security, mission-critical operational technology settings.
• Ability and willingness to travel to project sites up to 75% of the time; flexibility for work in high-demand, on-site network upgrade environments.
• Industry certifications required: Security+ (minimum), CCNA (minimum); CCNP Enterprise or Security preferred.
• Preferred: Previous experience working in Department of Defense or base network operations environments, direct experience with wireless controllers (e.g., 802.1X SSID deployments), and familiarity with network automation/monitoring toolsets.

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.