DDOT - Field Network Engineer — ITS Infras. (814014)

Advanced Network Consulting Inc; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

Advanced Network Consulting Inc. seeks a hands-on Field Network Engineer to support DDOT’s Intelligent Transportation Systems program in Washington, DC.

You will design, deploy, and operate a secure, highly available ITS network linking traffic signals, CCTV systems, and IoT devices across the district. The role blends field installations with datacenter operations, emphasizing uptime, safety, and reliability in mission-critical environments.

Qualifications

• Bachelor’s degree in CS/IT or equivalent professional experience.
• Experience with ITS, traffic systems, and secure networks.
• CCNA certification required; CCIE/CFOT or equivalent preferred.

Responsibilities

• Deploy and support DMVPN hub-and-spoke and spoke-to-spoke overlay networks.
• Coordinate Metro Ethernet circuits and dual-WAN redundancy.
• Manage VLANs, IP addressing, and L3 connectivity between sites and data centers.
• Implement network segmentation with VRFs, VLANs and firewall policies.
• Apply QoS to latency-sensitive ITS traffic.
• Monitor performance and maintain documentation.

Skills

Network Design

DMVPN & IPsec

BGP/OSPF/EIGRP

LTE/5G failover

Field Engineering

Network Documentation

VPN Troubleshooting

Education

Bachelor’s degree in CS/IT or equivalent experience

Equivalent professional experience

Tools

Ansible

Python scripting

Job description

The District Department of Transportation (DDOT) is seeking a hands-on Field Network Engineer to serve as a senior technical resource within the Intelligent Transportation Systems (ITS) program. This role is responsible for the design, deployment, and day-to-day operations of a secure, highly available ITS network connecting traffic signals, video surveillance systems, and IoT devices across the District of Columbia. The network environment leverages Metro Ethernet services as the transport underlay and a Cisco DMVPN secure overlay to link distributed field sites back to DDOT’s headend facilities and data centers. The engineer will work in both field and datacenter environments, with a focus on uptime, safety, and reliability in mission-critical operations.

Key Responsibilities

DMVPN & Secure Overlay Networking

• Deploy and support Cisco DMVPN (Phase 2/Phase 3) hub-and-spoke and spoke-to-spoke overlay networks across Metro Ethernet transport.
• Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces for the DMVPN fabric.
• Implement dynamic routing protocols (BGP, OSPF, EIGRP) over DMVPN tunnels to support automated failover and optimal path selection.
• Design failover and redundancy strategies, including LTE/5G backup paths, to ensure uninterrupted connectivity during circuit or equipment outages.
• Monitor tunnel health, latency, and throughput to maintain performance standards across all VPN connections.

Metro Ethernet & WAN Transport

• Coordinate with service providers on Metro Ethernet circuit provisioning (E-Line, E-LAN), turn-up, and incident resolution.
• Manage dual-WAN redundancy models and carrier handoff configurations at each site.
• Perform field installations and cutovers of routers, switches, cabinets, and handoff equipment.

Network Engineering & Operations

• Manage VLAN configurations, IP addressing schemes, and Layer 2/Layer 3 connectivity between remote aggregation points and headend data centers.
• Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains.
• Apply and tune QoS policies to prioritize latency-sensitive traffic such as signal control and video.
• Troubleshoot network issues end-to-end from field site through WAN transport to data center.
• Maintain accurate network documentation including diagrams, IP assignments, equipment inventories, and configuration records.

ITS Infrastructure Support

• Support Dot’s traffic signal control systems, CCTV/video surveillance platforms, and IoT field devices by ensuring reliable, low-latency transport connectivity.
• Coordinate field cabinet upgrades to accommodate new network equipment, including power and environmental requirements.
• Manage the migration of remote aggregation points from legacy infrastructure to modern DMVPN-based transport.
• Monitor network performance, availability, and service-level compliance across all ITS transport links.

Security & Compliance

• Ensure all network connections utilize encrypted communications per DDOT and District government security policies.
• Manage VPN certificate lifecycles, key rotation, and trust domain configurations.
• Implement IoT security and segmentation best practices for field-deployed devices.
• Support security audits, vulnerability assessments, and remediation efforts on ITS network infrastructure.

Work Environment

• Combination of field work (street-level cabinets, utility corridors), data center operations, and remote support.
• Travel to field locations across the District required; valid driver’s license required.
• Ability to lift and rack network equipment up to 50 lbs.
• Participation in scheduled maintenance windows and on-call availability for after-hours emergency response.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field (or equivalent professional experience). Required 11 Years
• Conveying technical and functional concepts for a specific technical specialty Required 6 Years
• Preparing complex technical documentation Required 6 Years
• Experience with Intelligent Transportation Systems (ITS) including traffic signal controllers, CCTV/video surveillance transport, and traffic manageme Required 6 Years
• Experience with LTE/5G failover solutions Required 6 Years
• Network automation skills using Ansible or Python-based scripting. Required 6 Years
• Knowledge of IoT security and segmentation best practices. Required 5 Years
• Knowledge of high-availability network design, redundant architectures, and disaster recovery planning. Required 8 Years
• Fiber optic network experience — including single-mode fiber design, SFP/SFP+ transceivers Required 6 Years
• Prior experience working with a state or municipal Department of Transportation. Required 6 Years
• Active CCNA Certification Required
• CCIE Enterprise Infrastructure, Certified Fiber Optic Technician (CFOT) or equivalent,
• CompTIA Network+ or Security+ ITIL v4 Foundation Highly desired