Senior Network Engineer

Senior Network Engineer

The Senior Network Engineer serves as the technical lead for the design, implementation, optimization, and sustainment of AWAKEN's enterprise network infrastructure. This role leads the engineering of terrestrial connectivity (inside plant), wired and wireless topology, RF design, and network capacity planning to ensure reliable, secure, and mission-ready connectivity across AETC's 25+ installations. This position combines deep hands-on engineering (70%) with architecture, documentation, and coordination responsibilities (30%), supporting enterprise modernization, Wi-Fi expansion, cloud-integrated designs, and Zero-Trust-aligned network segmentation.

Key Responsibilities

• Lead the design and implementation of terrestrial network connectivity, including fiber/copper plant, cabling paths, distribution frameworks, and campus-level infrastructure.
• Produce engineering artifacts such as topology diagrams, rack elevations, hardware lists, cable routes, and port/protocol mappings .
• Validate facility power availability, grounding requirements, and site readiness in coordination with base facilities and communications personnel.
• Support diversity routing, redundant paths, and high-availability transport designs.

• Conduct RF spectrum analysis, coverage modeling, and AP placement planning for indoor and outdoor AWAKEN environments.
• Engineer wireless networks to meet 1Gbps baseline service, scaling options (10/40/100Gbps), and AETC performance KPIs (latency, jitter, packet delivery, uptime).
• Ensure consistent RF performance in challenging facilities (concrete, hangars, cinderblock, multi-building campuses).
• Provide design solutions for roaming, authentication integration, and coverage extensions to flight lines, outdoor classrooms, and training ranges.

• Support transition to cloud-integrated and software-defined architectures, aligned with Zero-Trust initiatives and enterprise modernization.
• Engineer Layer 2/Layer 3 architectures, including VLAN segmentation, routing protocols (BGP, OSPF), traffic prioritization, and QoS/CoS for latency-sensitive workloads.
• Evaluate emerging network technologies and recommend upgrades to improve resiliency, performance, and user experience.

• Apply secure network configurations and assist in implementing STIG-aligned configurations on routers, switches, controllers, and wireless infrastructure.
• Support ACAS/Nessus remediation by validating network-related findings, implementing patches, and documenting corrective actions.
• Ensure compliance with NIST, DoD, and USAF networking security requirements in collaboration with the ISSM and Cloud Security teams.
• Assist in developing network segments supporting Zero-Trust principles (micro-segmentation, least-privilege routing, secure access).

• Ensure network architectures integrate cleanly with cloud platforms, virtualized environments, and containerized workloads (routing, load-balancing, service-mesh communication).
• Support secure connectivity between on-premise network infrastructure and hybrid cloud environments.

• Develop automation/scripts (e.g., Bash, Python) to support network configuration, device validation, and performance monitoring.
• Use Infrastructure-as-Code tooling (Terraform, Ansible) where applicable to support repeatable deployments and configuration baselines.
• Integrate network telemetry into enterprise monitoring and logging platforms.

• Conduct pre-deployment engineering validation in test-lab environments.
• Support site surveys (virtual and in-person), including floor plans, physical measurements, ingress/egress mapping, and environmental factors.
• Provide Tier-3 engineering support for complex troubleshooting across wired/wireless, RF, cloud-connected, and security-sensitive systems.
• Participate in transition from incumbent contractor, validating baselines, capturing configurations, and ensuring operational continuity.

• Partner closely with the Program Manager, Senior Solutions Architect, Senior Cloud Architect, ISSM, Customer Service Engineer, and Government Technical Leads.
• Produce accurate engineering documentation for CCBs, PMRs, installation packages, and change requests.
• Communicate clearly with government stakeholders across varying technical backgrounds.

Location: San Antonio area; located within 25 miles of JBSA-Randolph, TX Clearance: Ability to obtain and maintain a Secret clearance Customer: Air Education and Training Command (AETC), United States Air Force Required Qualifications

• Bachelor's degree in Network Engineering, Computer Science, Information Systems, or related technical field (or equivalent experience).
• 8-10+ years of hands-on experience in enterprise network engineering, including LAN/WAN design, Wi-Fi engineering, routing/switching, and RF spectrum analysis.
• Demonstrated expertise in: Terrestrial connectivity (fiber/copper), inside-plant engineering Enterprise Wi-Fi design (Aruba preferred), RF modeling, AP placement Routing (BGP, OSPF), switching, VLAN segmentation, QoS/CoS Firewalling, VPN, micro-segmentation, secure network baselines
• Experience applying or supporting DISA STIGs, ACAS/Nessus remediation, and Zero-Trust-aligned network architectures.
• Proficiency in network tooling and automation (Python, Bash, Ansible, Terraform, or equivalents).
• Ability to troubleshoot advanced issues spanning RF, wired/wireless transport, authentication, and hybrid cloud connectivity.
• Participate in PMRs and CCBs; maintain enterprise baseline and CM Plan; provide artifacts (topologies, inventories, rack elevations, ports/protocols) and information to Government tools/portals
• Excellent written and verbal communication skills.
• U.S. citizen; able to obtain Secret clearance and USAF CAC.

Preferred Qualifications

• Experience supporting DoD, USAF, or AETC network environments.
• DoDM 8140.03-aligned cyber workforce qualification or willingness to obtain
• Familiarity with Kubernetes networking, service mesh routing, or cloud-native load balancers.
• Certifications such as CCNP/CCIE, Aruba ACMP/ACMX, or equivalent.
• Experience contributing to ATO/RMF artifacts or supporting security control validation.
• Experience with SAFe practices, Jira/Confluence, and ServiceNow in DoD environments.