Network Systems Engineer (Mid-Level)

Systems Engineer (Mid-Level)Ulu HI-Tech is seeking a highly skilled Systems Engineer Mid to support a large-scale, globally distributed enterprise network environment supporting mission-critical Department of Defense operations. The ideal candidate will bring strong expertise across LAN/WAN/WLAN, network boundary engineering, routing, switching, network security, and Tier III troubleshooting.In this role, you will provide advanced engineering, integration, troubleshooting, and operational support for enterprise network infrastructure, serving as a technical lead and Tier III escalation resource for complex network challenges. You will work alongside senior engineers, cybersecurity professionals, and program stakeholders to maintain, enhance, and secure one of the world's largest intranet environments.Preferred Location: Pearl Harbor, HI (PRLH) Alternate Locations: Whidbey Island (WHDB) or Norfolk, VA (NRFK)What You'll Do:Enterprise Network Engineering- Lead efforts to identify, troubleshoot, analyze, and resolve complex network issues in a dynamic enterprise environment.- Configure, maintain, and troubleshoot network infrastructure, including switches, routers, VLANs, wireless access points (APs), firewalls, and network sensors.- Provide engineering expertise and operational support for one of the world's largest intranet environments.- Act as a Tier III escalation resource for complex incidents, including coordinating with vendors as necessary for incident resolution.- Act as an SME and technical backstop for troubleshooting efforts involving multiple network disciplines and teams of CCNP/CCIE-level engineers.- Apply extensive knowledge of defense-in-depth principles to secure enterprise network infrastructure.- Troubleshoot technologies and protocols including routing, switching, SD-WAN, WLAN, MPLS, VPNs, OSPF, BGP, EIGRP, switching protocols, and multicast.- Collaborate with cross-functional engineering and operations teams to enhance network availability, performance, reliability, and security.- Develop and maintain Engineering Implementation Plans (EIPs) supporting network changes and deployments.- Create and manage change management tickets for deployments, maintenance activities, upgrades, and other network changes.- Conduct Root Cause Analysis (RCA) in support of problem management activities and recurring incident resolution.- Participate in engineering, architecture, and project meetings to design and develop future enterprise network solutions.- Track engineering and operational work within an Agile/SAFe framework using JIRA.- Participate in Daily Stand-Ups (DSUs), retrospectives, Program Increment (PI) activities, and other Agile ceremonies.- Develop and deliver detailed demonstrations and technical updates supporting Program Increment objectives.Change & Configuration Management Responsibilities- Maintain version-controlled configuration baselines for network infrastructure devices, including routers, switches, firewalls, and sensors.- Maintain accurate records of startup and running configurations, firmware versions, security policies, and associated network configuration data.- Ensure configuration changes are properly documented, peer-reviewed, approved, and backed up to a centralized repository.- Maintain change-tracking and rollback capabilities to support operational resilience and configuration recovery.- Ensure network configurations remain compliant with applicable DISA Security Technical Implementation Guides (STIGs) and organizational cybersecurity policies.Lab Testing & Pre-Production Validation- Conduct pre-production validation testing for firmware upgrades, configuration changes, and security patches before deployment to production networks.- Perform testing within an isolated lab environment designed to mirror applicable production network topology and configurations.- Validate network functionality, security policies and controls, device interoperability, performance against established baselines, and deployment/rollback procedures.- Document testing results, identified risks, remediation requirements, and deployment recommendations prior to production implementation.Mandatory QualificationsEducation & Experience - Bachelor's degree with 8–12 years of relevant professional experience; or - Master's degree with 6–10 years of relevant professional experience.Security Clearance - Active Secret security clearance required. - Must be Top Secret eligible.Certifications Current DoD 8570/8140 IAT Level III certification such as:CASP+CISSPCCNP SecurityEquivalent qualifying certificationCurrent networking certification such as:CCNACCNPCCIEEquivalent vendor certificationTechnical Skills & Expertise - Extensive experience supporting enterprise LAN/WAN/WLAN environments.- Advanced troubleshooting experience with:Routing & SwitchingSD-WANMPLSVPN TechnologiesOSPFBGPEIGRPMulticast- Experience supporting large-scale enterprise networks.- Experience providing Tier III operational support and incident escalation.- Strong understanding of network security architecture and defense-in-depth concepts.- Experience working in Agile and/or SAFe environments utilizing JIRA.- Strong verbal, written, analytical, and problem-solving skills.Operational Requirements - Ability to participate in an on-call rotation. - Ability to perform scheduled and unscheduled work during off-hours, including maintenance windows, when required. - Ability to travel up to 10%.Preferred Qualifications - Previous experience supporting the Navy Marine Corps Intranet (NMCI) network. - Previous experience supporting Department of Defense (DoD) programs and environments. - Experience with network automation and Infrastructure as Code (IaC) technologies and practices. - Hands-on experience with automation technologies such as Ansible and Python. - Experience with Arista networking technologies. - Advanced Cisco networking certifications, including CCNP or CCIE, are highly desirable.