Principal Network Engineer

Principal Network Engineer

LOCATION: Hanscom AFB, Bedford, MA

JOB STATUS: Full-time

CLEARANCE: Secret

Salary Range: 150-180k dependent upon customer requirements when position is awarded

TRAVEL: CONUS and OCONUS

Astrion has an exciting opportunity for a Principal Network Engineer providing support to the EPASS HB contract at Hanscom AFB.

We anticipate this role becoming available to start in December 2025.

Qualifications

• Must have and be able to maintain an active Secret level clearance
• Must be a US citizen
• Clear understanding of Air Force Engineering, specifically network and communications.

• Bachelor's or Master's Degree
• 20+ years of experience with 12+ years of DoD related experience

Systems Engineering & Program Support

• Conduct program portfolio reviews to evaluate/recommend alternative plans, improve engineering processes, sustain program baselines, and validate system-level performance in accordance with specifications.
• Prepare technical documentation to define and recommend system/subsystem characteristics; produce management reports and technical presentations for planning, implementation, and corrective actions.
• Perform validation of systems, including development of criteria and procedures, and evaluate end-to-end communications (from sensor/source through C2 nodes to end users).
• Provide technical training, program engineering support, and integration/sustainment services for acquisition, deployment/fielding, and operations oversight.

• Analyze and recommend network requirements, architectures, and infrastructure.
• Monitor and analyze network workload, capacity, and performance.
• Diagnose and resolve network problems, ensuring continuity of operations.
• Recommend and implement backup/recovery procedures.
• Install, test, maintain, and upgrade network operating systems software.
• Ensure rigorous application of cybersecurity policies and practices.
• Support Agile software execution with Government and prime contractors.
• Support development of service-oriented architectures for software development.
• Provide life cycle network engineering support for sustainment activities.
• Create, update, and maintain detailed network design diagrams (Visio) with implementation details (cables, ports, buildings).
• Collect/analyze operational data to estimate availability and recovery factors.
• Maintain information on service level agreements (SLAs) and POCs for each pathway.
• Provide oversight for acquisition and configuration of network management systems.
• Support troubleshooting and infrastructure upgrades during operational mode.

• Configure and troubleshoot network/security technologies: VPN, DMVPN, GRE, IPsec, MACSec/Cisco TrustSec, ACLs, traffic flows, L2/L3 separation, fragmentation.
• Manage performance parameters: QoS, load balancing, multi-chassis ether channel, stateful switchover, nonstop routing/forwarding, graceful restarts, MTU, policing.
• Implement and troubleshoot protocols: Unicast/Multicast, BGP, EIGRP, IS-IS, OSPF, RTP, RSTP, STP, MPLS, LDP, VoIP, SNMP.
• Understand/document network failure identification and recovery procedures.
• Develop repeatable methods to test network pathways for performance and failure identification.
• Provide oversight for High Assurance Internet Protocol Encryptor (HAIPE) acquisition, configuration, and remote management systems.
• Understand security boundary designs (e.g., Cross Domain Solutions).
• Facilitate DISA engineering for communications pathways using Commercial Ethernet Gateway architectures.
• Assist in the acquisition of DISA point-to-point circuits.