Senior Network Engineer

TECHEAD; Lincoln (MA); On-site; USD 110,000 - 150,000; Full time

Job summary

TECHEAD is seeking a Senior Network Engineer to lead a lean team at Hanscom AFB, managing enterprise Cisco networks for 7,500+ users and 80+ buildings. You will design architectures, direct Tier 3 troubleshooting, and drive automation and security hardening efforts in a high-stakes environment.

Core on-site work hours are 7:30am–4:30pm EST with 100% on-site availability. A DoD Secret clearance is preferred; sponsorship may be available for eligible U.S. citizens.

Qualifications

• 10+ years of hands-on networking experience in large-scale environments.
• DoD Secret clearance preferred; US citizens eligible for sponsorship considered.
• Strong Cisco routing/switching, ISE, and network automation skills.
• Prime access to SolarWinds Orion for monitoring and maintenance.

Responsibilities

• Design, scope, configure, and integrate Cisco-based networks into enterprise architecture.
• Lead Tier 3 troubleshooting for complex L2/L3 issues with deep packet analysis.
• Administer and optimize 500+ devices, IPAM tools, and network platforms.
• Automate backend tasks with Python or PowerShell; harden systems.
• Leverage SolarWinds Orion for proactive monitoring and deployment.
• Configure Cisco ISE across the base environment with hands-on experience.
• Ensure DISA STIG compliance and maintain SOPs and topology maps.
• Assist with racking, cabling, and vendor coordination; mentor juniors.

Skills

Cisco routers

Cisco switches

SolarWinds Orion

Wireshark

PowerShell

Python

Network design

L2/L3 routing

Education

Bachelor's degree in Information Technology or related field

4+ years of relevant network engineering experience in lieu of a degree

Tools

Microsoft Visio

Job description

TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at TECHEAD.com or on Glassdoor.

Work Model: 100% Onsite (Core hours: 7:30am–4:30pm EST)

Clearance: Active Secret required; clearable candidates eligible for sponsorship

Position Overview

We are seeking a Senior Network Engineer to serve as a technical lead supporting the 66th Air Base Group (66 ABG) Communications and Information Division (66 ABG/SC) at Hanscom Air Force Base. In this role, you will serve as the senior technical anchor for a lean, high-impact team managing enterprise network infrastructure for over 7,500 end users, 80+ buildings, and 2 remote sites.

As part of the Air Force Information Network (AFIN) enterprise, you will oversee a complex, converged environment encompassing 500+ Cisco network devices across both classified and unclassified domains. Because we operate as a tight-knit local NOC and engineering team combined, there is "no job too big or too small"—you will design and scope new architectural solutions, lead high-tier troubleshooting efforts, and jump in alongside team members for all-hands-on-deck operational needs.

Key Responsibilities

• Network Design & Architecture: Design, scope, configure, and integrate new Cisco-based network solutions and hardware into existing enterprise architecture with minimal supervision.
• Tier 3 Operations & Troubleshooting: Serve as the team's primary subject matter expert for complex Layer 2 and Layer 3 routing/switching issues. Utilize tools like Wireshark to perform deep packet capture and traffic analysis into and out of the base network, cloud environments, and boundaries.
• Network Operations & Maintenance: Administer, maintain, and optimize 500+ unclassified and classified Cisco network devices, IP address management tools, and network management platforms.
• Scripting & System Hardening: Utilize Python or PowerShell scripting to automate backend system maintenance, apply fixes, and execute system hardening.
• SolarWinds Administration: Leverage deep working knowledge of SolarWinds Orion (NPM/NCM) for proactive network monitoring, maintenance, and deployment configuration.
• Cisco ISE Management: Configure, manage, and troubleshoot Cisco Identity Services Engine (ISE) across the base environment (minimum 2 years hands-on experience required).
• Compliance & Security: Ensure network alignment with DISA STIGs and local military regulations; apply system hardening measures and maintain strict operational documentation.
• Documentation & Mapping: Create and maintain detailed network topology maps (classified and unclassified) using Microsoft Visio, alongside Standard Operating Procedures (SOPs).
• Hardware & Physical Infrastructure: Assist with racking, mounting, and cabling (Fiber, CAT5E, CAT6) network hardware and Uninterruptible Power Supply (UPS) systems; interface with vendors for warranty claims and upgrades.
• Mentorship: Serve as the senior go-to technical guide for junior engineers on the team.

Required Qualifications & Experience

• Experience: 10+ years of dedicated, recent hands-on networking experience in large-scale enterprise environments (7,000+ users / hundreds of network devices).
• Education: Bachelor’s degree in Information Technology or a related field (or an additional 4+ years of relevant network engineering experience in lieu of a degree).
• Clearance: Active DoD Secret Security Clearance preferred; candidates who are U.S. citizens eligible for clearance sponsorship will be considered.
• Certifications: CompTIA Security+ (DoD 8570/8140 compliant) strongly preferred. Candidates without Sec+ must be willing and able to obtain certification within 30–60 days of hire.
• Deep, current expertise with Cisco routers and switches (Layer 2 / Layer 3 protocols, routing protocols).
• Minimum 2 years of hands-on experience with Cisco ISE.
• Advanced troubleshooting capabilities with SolarWinds Orion (NPM/NCM) and Wireshark.
• Practical experience using PowerShell or Python for network automation, backend scripting, and operational tasks.
• Physical Requirements: Ability to safely lift and rack network hardware, UPS battery backups, and equipment weighing 50 lbs or more.

Preferred Skills & Attributes

• Prior experience supporting DoD or Air Force environments, including familiarity with DISA STIG compliance and system hardening principles (or strong industry experience with equivalent compliance standards).
• Strong understanding of physical transport media (Fiber/Cat6 cabling infrastructure) and UPS emergency backup deployment.
• A collaborative, "team-first" mindset with excellent customer service skills and the patience to mentor junior teammates.
• Work Location: 100% Onsite at Hanscom AFB. Remote or hybrid work is strictly unavailable per government policy for this position.
• Hours: Core working hours are generally 7:30am to 4:30pm EST.
• Operational Availability: Must be willing to support emergency network operations on an as-needed basis (24/7 coverage during major outages or critical deployment windows).

TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.