Network & Cybersecurity Engineer

IT Motives; Bingen (WA); On-site; USD 120,000 - 150,000; Full time

Job summary

IT Motives seeks a hands-on Network Engineer to own stability, security, and real-time diagnostics of UAS communications to ground control stations. You will engineer resilient VPN, firewall, and wireless architectures across Linux and Windows in field environments.

Role emphasizes tactical/expeditionary comms, remote SCADA familiarity, and mature debugging capabilities with strong TCP/IP knowledge. Strong scripting skills and field support are valued.

Qualifications

• Bachelor's degree in CS/CE/EE or related field.
• 5+ years hands-on network engineering and field communications experience.
• Experience configuring and troubleshooting VPNs, firewalls, and routing on Windows and Linux.
• Experience with wireless/RF networking and satellite communications (Starlink, VSAT, etc.).
• Ability to design and scale network architectures and create repeatable deployment approaches.
• Scripting or automation in PowerShell or Python for basic tools and health checks.
• Proven ability to stabilize imperfect networks and reduce operator support burden.
• Strong TCP/IP fundamentals including NAT, DNS, DHCP, and routing.
• Experience with pfSense, iptables/nftables, and secure remote access policies.

Responsibilities

• Lead design and evolution of network architecture across VPNs, firewalls, RF relays, Starlink links, and GCS connectivity.
• Configure and maintain VPN servers/clients, firewalls, and routing across Windows and Linux.
• Design scalable network architectures with repeatable configurations and deployment approaches.
• Manage data flows between field UAS/GCS and home-base infrastructure.
• Maintain network topology docs and configuration standards across deployments.
• Diagnose and resolve remote network issues, including RF/satellite links and latency.
• Establish monitoring, logging, alerting, and health checks for proactive visibility.
• Develop diagnostics tools and dashboards with software engineering for operators.
• Provide in-field support for complex network issues and root-cause analysis to improve reliability.
• Create and update SOPs and operator documentation for field personnel.

Skills

VPN configuration

Firewall configuration

Linux

Windows

TCP/IP fundamentals

Scripting: PowerShell

Scripting: Python

Network troubleshooting

WISP field networking

Starlink satellite

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

pfSense

iptables/nftables

Starlink

VPN technologies (n2n/peer-based)

Job description

Are you a Network Engineer who thrives when the "data center" is a tactical field rig, a Starlink dish, and a multi-hop RF relay? Our client is looking for a hands-on Network Engineer to own the stability, security, and real-time diagnostics of the communications linking our Unmanned Aircraft Systems (UAS) to ground control stations. In this high-impact role, you won't just be managing routine server racks—you’ll be engineering resilient VPN, firewall, and wireless architectures across Linux and Windows devices operating in unpredictable field environments.

If you bring a background in tactical/expeditionary communications, WISP field networking, or remote SCADA environments—and enjoy designing systems that don't break far from a help desk—we want to hear from you. We value diversity in the workplace and encourage women, minoritiesd, and veterans to apply!

Type: Perm

Network Architecture & Infrastructure Engineering: 35%

• Lead the design and evolution of network architecture across VPNs, firewalls, RF relays, Starlink links, and Ground Control Station (GCS) connectivity as deployments scale to a larger fleet.
• Configure and maintain VPN servers and clients, firewalls, routing, and related network services across mixed Windows and Linux environments.
• Design network architecture for scalability, ensuring configurations, infrastructure, and deployment approaches remain repeatable and maintainable as the fleet grows.
• Collect, manage, and route data flows between field-deployed UAS/GCS systems and home-base or office infrastructure.
• Maintain network topology documentation, interface definitions, and configuration standards across GCS variants and deployment sites.

Network Operations, Monitoring & Field Support: 35%

• Diagnose and resolve network issues including degraded or intermittent RF and satellite links, interference, obstruction, latency, packet loss, routing, and connectivity problems, primarily through remote troubleshooting.
• Establish network monitoring, logging, alerting, and health-check capabilities to identify and surface network issues proactively.
• Build, or partner with Software Engineering to develop, diagnostic tools and dashboards that provide operators with clear and actionable visibility into network health.
• Serve as the technical escalation point for network issues beyond operator or first-line troubleshooting capability.
• Provide occasional in-field support for complex network or communications issues that cannot be resolved remotely.
• Identify recurring network failure modes, perform root-cause analysis, and implement corrective actions that improve system reliability and reduce operator IT support burden.

Cybersecurity, Standardization & Operational Resilience: 30%

• Apply secure network design practices including network segmentation, secure remote access, VPN/encryption, firewall configuration, authentication, and access control across UAS and ground network infrastructure.
• Configure and harden Windows, Linux, VPN, firewall, and other network devices using established security baselines and configuration-control practices.
• Support vulnerability identification and remediation, security logging and monitoring, patching, and network security improvements across deployed systems.
• Develop and maintain standard operating procedures, secure configuration standards, troubleshooting guides, and operator documentation that enable field personnel to resolve common issues without requiring deep networking expertise.
• Ensure cybersecurity, network configurations, monitoring capabilities, and documentation remain standardized and maintainable across GCS variants and deployment locations.

Your Boarding Pass: (Required for consideration)

• Must possess a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Systems Engineering, Information Technology, or a related field.
• Have a minimum of five (5) years of experience in network engineering, systems administration, or field communications, with direct, hands‑on responsibility for network stability and troubleshooting (not primarily help-desk/tier-1 support).
• Demonstrated experience configuring and troubleshooting VPNs, firewalls, and routing across both Windows and Linux environments.
• Experience with wireless/RF networking and satellite communications (e.g., Starlink, VSAT, or similar), including working with degraded, intermittent, or high‑latency links.
• Experience designing or scaling network architectures, not solely maintaining existing ones — you'll be shaping how our networks evolve as we grow.
• Scripting or automation experience (PowerShell and/or Python) sufficient to build basic diagnostic tools and health checks, or to partner effectively with a software engineering team on more complex tooling.
• Demonstrated ability to stabilize and improve an existing, imperfect network environment rather than only building greenfield systems.
• Strong working knowledge of TCP/IP networking fundamentals: routing, subnetting, NAT, DNS, DHCP.
• Proficiency configuring and troubleshooting VPNs (e.g., n2n or similar peer‑to‑peer/supernode‑based VPN architectures), firewalls, and network security policies.
• Firewall platforms: pfSense, iptables/nftables, Windows Defender Firewall/advanced security (or equivalents).

Preferred Skills:

• Experience operating in field, remote, or expeditionary environments — tactical communications, WISP field networking, industrial/SCADA remote‑site networking, or similar.
• Experience supporting non‑technical end users (operators) in troubleshooting network issues, with an eye toward simplifying and self‑service enablement.
• Experience securing field‑deployed, tactical, aerospace, or defense networks, including VPNs, firewalls, encrypted communications, network segmentation, and secure remote access.
• Familiarity with DoD cybersecurity practices such as RMF, NIST SP 800-53, and DISA STIGs as they relate to network infrastructure and system hardening.
• Experience supporting vulnerability assessments, security configuration reviews, patching, or remediation of network and operating‑system security findings.
• Relevant military communications/signal corps training or certification.
• Relevant network or cybersecurity certification such as Security+, CCNP Security, CISSP, or equivalent practical experience.