Mission Network Engineer

Metrea; Washington (District of Columbia); On-site; USD 150,000 - 185,000; Full time

Benefits offered by this job

Comprehensive medical plan options

401(k) match

Paid parental leave

Generous PTO

Life and disability insurance

Job summary

Metrea is seeking a Mission Network Engineer to maintain, secure, and evolve complex network environments, crucial for enterprise information systems and operational activities.

Responsibilities include designing network solutions, managing security policies, and troubleshooting connectivity issues. Candidates should have significant experience in networking, Linux, and secure communications, along with a bachelor's degree in related fields. This full-time position offers a pay range of $150,000 to $185,000 annually.

Qualifications

• 7+ years of experience in network design and administration.
• Experience with secure communications and operational infrastructure.
• Strong knowledge of routing, switching, and firewalls.

Responsibilities

• Maintain and secure complex network environments.
• Troubleshoot connectivity and performance issues.
• Design and implement network architectures.

Skills

Networking

Linux

Virtualization

Secure Communications

Systems Integration

Troubleshooting

Education

Bachelor’s degree in Information Technology or related discipline

Tools

Cisco

Juniper

Palo Alto

OpenVPN

Job description

Position Summary

The Mission Network Engineer is responsible for maintaining, securing, and evolving complex network environments that support enterprise information systems, remote ISR systems, research and development activities, and mission-specific operations. These environments include physical and virtual infrastructure, Linux-based systems, multiple network paths, secure remote access, overlay networks, layered security controls, and unique communications architectures. The role requires a broad technical foundation across networking, Linux, virtualization, secure communications, systems integration, and special or non-standard communications TTPs, supporting secure connectivity, segmentation, traffic protection, low-signature communications, obfuscation, anonymity, and resiliency techniques in accordance with authorized requirements, applicable policy, export control requirements, access management procedures, and operational‑security standards.

What You’ll Do

• Design, build, configure, maintain, and troubleshoot complex commercial, classified, controlled, and mission‑specific network environments
• Support network infrastructure for enterprise information systems, remote ISR systems, and distributed operational environments
• Configure and manage routing, switching, firewalls, VPNs, secure remote access, wire‑less networking, virtual networking, Linux networking, and network security appliances
• Implement secure tunneling, remote access, mesh VPN, site‑to‑site VPN, overlay networking, and resilient communications solutions using technologies such as WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools
• Develop and maintain secure network architectures that support segmentation, access control, traffic protection, low‑signature communications, obfuscation, monitoring, and operational‑security requirements
• Troubleshoot complex connectivity and performance issues across physical networks, virtual networks, Linux systems, VPNs, cloud services, endpoints, servers, security tools, ISR systems, and mission applications
• Monitor network performance, analyze traffic, conduct packet capture, and provide recommendations for reliability, capacity, security, and quality of service
• Plan and execute network upgrades, expansion, lifecycle management, configuration changes, and technical improvements to support evolving mission and enterprise requirements
• Evaluate, test, and integrate new network technologies, communications tools, open‑source platforms, appliances, and services
• Support network security, compliance, and incident response activities, including firewall policy management, segmentation, logging, IDS/IPS integration, vulnerability remediation, documentation, and audit support
• Create and maintain network diagrams, technical documentation, configuration baselines, standard operating procedures, implementation guides, records, and reports
• Coordinate with systems administrators, cybersecurity teams, vendors, cross‑functional technical teams, and mission stakeholders to resolve issues and support project delivery
• Provide technical guidance to less‑experienced staff as needed

What You Bring

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Communications Systems, or related discipline. Relevant military, government, or industry experience may be considered in lieu of a degree.
• Minimum 7 years of experience designing, administering, securing, and troubleshooting complex network environments in secure, classified, mission‑critical, operational, or highly technical settings.
• Broad hands‑on knowledge across networking, Linux, virtualization, secure communications, systems integration, and operational infrastructure.
• Strong experience with TCP/IP, routing, switching, VLANs, subnetting, DNS, DHCP, NAT, firewalls, VPNs, wireless networking, secure remote access, Linux networking, and command‑line troubleshooting.
• Experience designing and supporting physical, virtual, cloud, hybrid, distributed, Linux‑based, or mission‑specific network architectures.
• Experience with network, firewall, VPN, and routing technologies such as Cisco, Juniper, Palo Alto, Fortinet, Aruba, Ubiquiti, MikroTik, pfSense, OPNsense, WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools.
• Experience with secure tunneling, overlay networks, mesh VPNs, redundant connectivity, failover, virtual appliances, and resilient communications architectures.
• Experience supporting remote systems, distributed infrastructure, fielded technical systems, ISR systems, tactical networks, expeditionary networks, or other non‑standard communications environments preferred.
• Understanding of OPSEC‑informed network design, traffic protection, infrastructure concealment, anonymity, obfuscation, low‑signature communications, and secure communications techniques.
• Experience with network monitoring, packet capture, logging, SIEM, IDS/IPS, vulnerability remediation, scripting, automation, technical documentation, and compliance frameworks such as NIST 800‑171, DFARS 252.204‑7012, CMMC, or RMF.
• Strong communication skills and ability to work independently in ambiguous environments while developing practical solutions for unique operational requirements.
• Must be a U.S. citizen with the ability to obtain and maintain a U.S. Government security clearance.

Additional Eligibility Qualifications

• Experience supporting U.S. Government, DoD, military, intelligence, SOF, ISR, EW, cyber, or other national security environments.
• Experience supporting classified, compartmented, protected, or controlled network environments such as SIPR, JWICS, SAP, SCI, or equivalent environments.
• Previous military, defense, government, or operational experience involving secure communications, mission networks, tactical networking, remote ISR systems, or non‑standard communications architectures.
• Experience with SOF, JSOC, Special Operations, intelligence, U.S. National Laboratories, protected research environments, restricted engineering environments, or similar security‑sensitive technical organizations preferred.
• Familiarity with zero‑trust architecture, cross‑domain solutions, network segmentation, secure transport, tunneling, overlay networks, mesh VPNs, traffic shaping, network obfuscation, anonymity, and low‑signature infrastructure concepts.
• Experience supporting networks with unique OPSEC, access control, attribution‑management, export control, or infrastructure protection requirements.
• Completion of relevant operational network and secure communications training preferred, including operational infrastructure, remote bridging, network analysis, Linux for operators, digital signature reduction, tunneling, secure transport, and operational network infrastructure.
• Experience developing or supporting incident response playbooks, internal security audits, vulnerability management activities, inspections, or accreditation efforts.
• Certifications such as CCNA, CCNP, CompTIA Network+, Security+, CySA+, CISSP, Palo Alto, Fortinet, Juniper, Linux+, cloud networking, or equivalent certifications in networking, security, cloud, or infrastructure engineering.
• Active Secret, Top Secret, or TS/SCI clearance preferred.

Benefits

• Comprehensive medical plan options
• HSA/FSA accounts
• Dental and vision coverage
• 6% employer 401(k) match
• Fully paid parental leave for all new parents
• Generous PTO
• Life and disability insurance
• Long‑term and short‑term disability coverage
• AD&D Coverage
• Pet Insurance
• Employee Assistance Program
• Subsidized gym membership / plans through Wellhub

Work Authorization / Security Clearance

• Applicants must be legally authorized to work in the United States.
• This position requires eligibility to obtain a TS/SCI clearance. U.S. citizenship is required. Candidates will be subject to a background investigation in accordance with federal requirements.

AAP/EEO Statement

Metrea Spectrum Operations LLC. is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other characteristics protected by law.

Position Type and Expected Hours of Work

This is a full‑time exempt position with typical working hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. Hours and work shifts may change in accordance with department and business needs.

Work Environment

Washington DC or North Carolina

Travel

Frequent travel to our U.S. facilities (FL, DC, MD, NY, and CA) and overseas locations as required.

Pay Range

PAY RANGE: $150,000 USD - $185,000 USD