Overview

Principal Network Engineer

LOCATION: Hanscom AFB, Bedford, MA

JOB STATUS: Full-time

CLEARANCE: Secret

Salary Range: 150-180k dependent upon customer requirements when position is awarded

TRAVEL: CONUS and OCONUS

 

Astrion has an exciting opportunity for a Principal Network Engineer providing support to the EPASS HB contract at Hanscom AFB.

We anticipate this role becoming available to start in December 2025.

QUALIFICATIONS:

Must have and be able to maintain an active Secret level clearance Must be a US citizenClear understanding of Air Force Engineering, specifically network and communications. 

PREFERRED QUALIFICATIONS:

Bachelor's or Master's Degree20+ years of experience with 12+ years of DoD related experience

RESPONSIBILITIES:

Systems Engineering & Program Support

Conduct program portfolio reviews to evaluate/recommend alternative plans, improve engineering processes, sustain program baselines, and validate system-level performance in accordance with specifications.

Prepare technical documentation to define and recommend system/subsystem characteristics; produce management reports and technical presentations for planning, implementation, and corrective actions.

Perform validation of systems, including development of criteria and procedures, and evaluate end-to-end communications (from sensor/source through C2 nodes to end users).

Provide technical training, program engineering support, and integration/sustainment services for acquisition, deployment/fielding, and operations oversight.

Network Engineering & Operations

Analyze and recommend network requirements, architectures, and infrastructure.

Monitor and analyze network workload, capacity, and performance.

Diagnose and resolve network problems, ensuring continuity of operations.

Recommend and implement backup/recovery procedures.

Install, test, maintain, and upgrade network operating systems software.

Ensure rigorous application of cybersecurity policies and practices.

Support Agile software execution with Government and prime contractors.

Support development of service-oriented architectures for software development.

Provide life cycle network engineering support for sustainment activities.

Create, update, and maintain detailed network design diagrams (Visio) with implementation details (cables, ports, buildings).

Collect/analyze operational data to estimate availability and recovery factors.

Maintain information on service level agreements (SLAs) and POCs for each pathway.

Provide oversight for acquisition and configuration of network management systems.

Support troubleshooting and infrastructure upgrades during operational mode.

Technical Expertise

Configure and troubleshoot network/security technologies: VPN, DMVPN, GRE, IPsec, MACSec/Cisco TrustSec, ACLs, traffic flows, L2/L3 separation, fragmentation.

Manage performance parameters: QoS, load balancing, multi-chassis ether channel, stateful switchover, nonstop routing/forwarding, graceful restarts, MTU, policing.

Implement and troubleshoot protocols: Unicast/Multicast, BGP, EIGRP, IS-IS, OSPF, RTP, RSTP, STP, MPLS, LDP, VoIP, SNMP.

Understand/document network failure identification and recovery procedures.

Develop repeatable methods to test network pathways for performance and failure identification.

Provide oversight for High Assurance Internet Protocol Encryptor (HAIPE) acquisition, configuration, and remote management systems.

Understand security boundary designs (e.g., Cross Domain Solutions).

Facilitate DISA engineering for communications pathways using Commercial Ethernet Gateway architectures.

Assist in the acquisition of DISA point-to-point circuits.