Network Engineer-Secret

The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cyber security hardening across unclassified (NIPR) and classified (SIPR) enterprise environments. Operating within a high-tempo defense architecture, this role ensures maximum network availability, rapid fault isolation, and strict alignment with Department of War (DoW) directives and operational security mandates., * Serve as the primary alternate to the Team Lead; assume operational control of shift workflows, task allocation, and daily priorities in the Team Lead’s absence

• Maintain continuous operational surveillance of enterprise network infrastructure and transport systems to identify real-time alerts, hardware alarms, and traffic anomalies.
• Triage, isolate, and remediate Layer 1 through Layer 3 network incidents using established Standard Operating Procedures (SOPs) and automated network scripts.
• Escalate complex, cross-domain, or multi-system outages to senior leadership and advanced engineering teams with comprehensive troubleshooting logs.
• Provision, deploy, configure, and optimize enterprise-class routers, multilayer switches, and associated network appliances to ensure performance and redundancy.
• Execute operating system upgrades (Cisco IOS/IOS-XE) and firmware refreshes across the fleet.
• Liaise directly with external telecommunications carriers and hardware vendors to troubleshoot circuit degradations, resolve carrier outages, and conduct loopback testing.
• Plan, coordinate, and execute Authorized Service Interruptions (ASIs) strictly adhering to command-directed change management processes.
• Enforce DoW and local command cybersecurity directives by applying Security Technical Implementation Guides (STIGs) and remediating IAVM/patching vulnerabilities.Program, maintain, and manage Type-1 Inline Network Encryptors (INE) (e.g., TACLANE) at network Points of Presence (PoPs) using GEM-X or adjacent DoD element management suites.
• Strictly adhere to and maintain DoD Communications Security (COMSEC) material handling, accountability, and two-person integrity protocols.
• Lead technical execution for site modernization initiatives, lifecycle tech refreshes, and special engineering projects.
• Participate in unit on-call rotation schedules to provide rapid surge support for critical operational outages., * Under minimum supervision designs and coordinates the installation and acceptance testing of the system network.
• Monitors network hardware operations to ensure properly set configuration options.
• Plans implementation of enhancements and upgrades to the network; performs cost/benefit studies of network configurations and recommends enhancements; directs acquisition, installation, and testing of network hardware; advises network users of hardware requirements, configurations, and limitations; and isolates, resolves, or circumvents network problems.

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or related STEM field with 5+ years of progressive network engineering experience; OR
• Equivalent combination of formal military technical training, specialized certifications, and practical experience in lieu of a degree.
• Three years additional applicable experience may be substituted for a degree.
• Must hold and maintain an active DoD Secret clearance.
• Must meet DoD 8140 IAT Level II or III baseline certification requirements:
• Cisco Certified Network Associate (CCNA) .
• CompTIA Security+ CE
• OptionalExpert-level proficiency configuring and troubleshooting
• Virtual LANs (VLANs), VLAN Trunking Protocol (VTP), Port Security, Spanning Tree Protocol (STP/RSTP/MSTP), 802.1Q trunking, and L2/L3 etherchannels.
• Extensive hands-on experience designing, implementing, and diagnosing dynamic routing protocols, specifically EIGRP, OSPF, and ISIS.
• Demonstrated success troubleshooting physical (Layer 1) and data link (Layer 2) transport fabrics across both unclassified and classified enclaves.
• Hands-on experience configuring, keying, and administering KG-17XX series encryptors, HAIPE devices, and GEM-X management systems., * Direct hands-on administration of Cisco Identity Services Engine (ISE) for 802.1X network access control and policy enforcement.
• Experience deploying and managing software-defined infrastructure using Cisco Catalyst Center (DNA Center).
• Prior operational familiarity with Air Force District of Washington (AFDW), Air Force National Capital Region (AFNCR), or unified Air Force communications architectures.
• Experience delivering enterprise IT and communications support within high-security National Capital Region (NCR) campuses, such as The Pentagon, Joint Base Andrews (JBA), or Joint Base Anacostia-Bolling (JBAB).

Minimum/General Experience:

• Five years’ experience analyzing, identifying, and resolving complex network hardware, circuit, and transmission logic problems.
• Experienced in the design, installation and acceptance testing of complex high-speed networks.
• Applies the principles of assessing and analyzing network transmission application to resolve reported malfunctions.

• 3 Medical Plan Options
• Dental and Vision
• FSA, DCFSA, HSA
• Life/AD&D Insurance
• Short-Term & Long-Term Disability
• Employee Assistance Program (EAP)
• Training and Educational Assistance
• Paid Time Off (PTO)
• 11 Federal holidays
• 401k plan with up to a 6% match (100% immediate vesting)

Equal Opportunity Employer

Sunayu, LLC serves as a premier technology partner to the Defense and Intelligence communities, delivering mission-critical engineering solutions across the nation. Our operations are anchored in a commitment to trust, accountability, and ethical transparency, ensuring the high-performance outcomes necessary to protect our country’s most vital interests.

Culture

Our strength lies in our community: Our team prioritizes collaboration, professional growth, and encourages open communication. At Sunayu, we don’t just secure the mission-we grow together.

Career Development

We support and encourage our team members to continue their professional growth by providing company-reimbursed training and continuing education of up to $5,000 per year. We also participate in many industry conferences and events where we share our expertise and experiences.