Network Engineer

MTSI is seeking a full-time Network Engineer located at Wright-Patterson AFB, Ohio. The Network Engineer will support the maintenance, optimization, and expansion of the current on-premise network environment while assisting with the design and integration of a pilot cloud enclave. This role will be responsible for ensuring stable network operations, routing and switching continuity, firewall integration, segmentation, IP address management, connectivity planning, and hybrid cloud readiness. The candidate will work closely with cloud engineers, system engineers, DevOps personnel, cybersecurity staff, and program leadership to maintain current operations while preparing the network for cloud extension and eventual broader cloud adoption. The ideal candidate has previously supported production enterprise networks and understands how to balance operational stability with modernization. They should be able to perform root cause analysis, explain technical issues clearly, document changes, and work effectively with system, cloud, security, and application teams. Responsibilities: Your essential job functions will include but may not be limited to: *Maintain, troubleshoot, and expand enterprise on-premise network infrastructure. *Support routing, switching, VLAN, VRF, firewall, VPN, load balancing, and network segmentation requirements. *Assist with integration between the on-premise environment and pilot cloud enclave. *Develop and maintain network diagrams, IP plans, port/protocol matrices, firewall rule documentation, and routing documentation. *Support network connectivity for multi-tenant environments, backend systems, frontend access systems, storage systems, directory services, and management networks. *Perform network configuration changes through formal change management processes. *Troubleshoot packet loss, latency, asymmetric routing, MTU issues, DNS issues, TLS inspection issues, firewall policy issues, and routing failures. *Support secure enclave design using segmentation, access control lists, firewall policies, VPNs, and zero-trust principles. *Participate in migration planning, cutover events, test events, and rollback planning. *Support monitoring, logging, and alerting for network performance and availability. *Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements. *Contribute to network standards, configuration baselines, and operational runbooks. *Explain network risk, operational impact, and mitigation strategies. *Mentor junior staff and participate in architecture reviews. *Assist PM and System Administrators in procurement activities *Assist in the planning for large-scale projects through vendor comparison and cost studies *Create and deliver system status updates to customers and stakeholders Qualifications Required: *TCP/IP, subnetting, routing, switching, NAT, PAT, VLANs, trunks, ACLs, QoS, and network segmentation. *Dynamic routing protocols such as OSPF, BGP, EIGRP, or equivalent enterprise routing protocols. *Firewall rule design, inter-zone traffic policy, VPN tunnels, and security boundary enforcement. *Enterprise DNS, DHCP, NTP, IPAM, and certificate-aware network services. *Hybrid connectivity concepts such as site-to-site VPN, private circuits, cloud gateways, and transit routing. *Network troubleshooting using CLI tools and packet-level analysis. *High availability network designs, including redundant links, routing failover, firewall HA, and load balancing. *Change control, maintenance windows, implementation planning, and rollback execution. *Network documentation suitable for operations, engineering review, security review, and leadership briefing.

• Strong documentation discipline.
• Comfortable working in maintenance windows and high-visibility operational environments.
• Ability to communicate clearly with technical and non-technical stakeholders.

*Candidates should have working knowledge of at least one or more of the following:

• Python for network automation and data parsing
• Ansible for network configuration management
• Bash or PowerShell for operational scripting
• YAML, JSON, Jinja2 templates
• Git-based configuration control

*Network tools including but not limited to: Ansible, Wireshark, Network Management Systems, Network configuration management, sflow/NetFlow, IPAM, and SDN. *Linux experience. *Self-starter with a strong sense of personal responsibility. *10 years' experience working as a Network Engineer or related field.

• Proficiency with Active Directory, domain controllers, IP addressing, DNS, remote access, VLANs, and VoIP systems

Education: *Bachelor's degree in an IT-related field (e.g., cybersecurity, computer science, computer engineering). Preferred certifications include: *CompTIA Network+, Security+ *Cisco CCNA, CCNP, DevNet *Azure Network Engineer, Google Professional Cloud Network Engineer, AWS Cloud Engineer *VMware VCP, VCAP *Red Hat RHCSA, RHCE Even better if you have these desired skills: *Cisco IOS, IOS-XE, NX-OS, Catalyst, Nexus *Dell networking platforms *Palo Alto firewalls *Fortinet FortiGate *Cisco ASA/Firepower *Juniper SRX/EX/QFX *F5 BIG-IP, NGINX, HAProxy, or other load balancers *SolarWinds, PRTG, Zabbix, Nagios, Grafana, Elastic, Splunk, or equivalent monitoring tools *Wireshark, tcpdump, nmap, netcat, traceroute, MTR *Infoblox or similar IPAM/DNS/DHCP platforms *Git, GitLab, GitHub, Bitbucket, or equivalent version control systems *Visio, Draw.io, Lucidchart, Miro, or equivalent diagramming tools *Experience managing AWS/Azure environments. Clearance Requirements : *Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).
#LI-MM1 #ONSITE

• 
  
  
  Interesting Work:
  
  
  
  Our co-workers support some of the most important and critical programs to our national defense and security.
  
  
  
  
• 
  
  
  Values:
  
  
  
  Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
  
  
  
  
• 
  
  
  100% Employee Owned:
  
  
  
  We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
  
  
  
  
• 
  
  
  Great Benefits - Most Full-Time Staff Are Eligible for:
  
  
  
  
  



• Starting PTO accrual of 20 days PTO/year + 10 holidays/year
  
  
• Flexible schedules
  
  
• 6% 401k match with immediate vesting up to $9k annually
  
  
• Semi-annual bonus eligibility (July and December)
  
  
• Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
  
  
• Up to $10,000 in annual educational reimbursement
  
  
• Other company funded benefits, like life and disability insurance
  
  
• Optional zero deductible Blue Cross/Blue Shield health insurance plan
  
  





• 
  
  
  Track Record of Success:
  
  
  
  We have grown every year since our founding in 1993.
  
  
  
  

Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance

MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.

For more information about MTSI, please visit

MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.