Sr. Network Engineer

Optimal Solutions Inc.; Orlando (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Optimal Solutions Inc. seeks a seasoned Networking/Systems Engineer with a Secret clearance to support DoD deployments in government facilities and multi-site environments in Orlando, Florida.

You will design VLANs and VRFs, configure long-haul encrypted routers, manage BGP/OSPF, ensure RMF/ATO compliance, and develop technical documentation and SOPs in collaboration with government and commercial stakeholders.

Qualifications

• Minimum 10 years of networking/systems engineering experience.
• Strong DoD networking architecture knowledge including enclave segmentation and cross-domain concepts.
• Hands-on VLAN design across multi-site environments.
• VRF design and configuration for traffic isolation and multi-tenant segmentation.
• Experience with long-haul encrypted routers and link encryptors including Type 1/HAIPE devices.
• Solid understanding of TCP/IP, UDP, Ethernet, MPLS, QoS.
• Ability to perform security assessments using DISA STIGs and NIST 800-53 controls.
• Experience authoring technical documentation and SOPs.

Responsibilities

• Conduct site surveys and deploys in government facilities including OCONUS environments.
• Support DoD networking architectures and network boundary defense.
• Design and implement VLANs with 802.1Q trunking and inter-VLAN routing.
• Design and configure VRF for traffic isolation across multi-site networks.
• Configure and troubleshoot long-haul encrypted routers and link encryptors.
• Manage BGP, OSPF, and static routing in segmented VRF environments.
• Work with TCP/IP, UDP, Ethernet, MPLS, QoS.
• Apply DoD RMF/ATO principles and conduct risk assessments.
• Create network diagrams, admin guides, installation procedures, and SOPs.
• Collaborate with government and commercial stakeholders.

Skills

Networking architectures

VLAN design

VRF design/configuration

Routing protocols (BGP/OSPF)

DoD RMF/ATO awareness

Security assessments (DISA STIGs/NIST)

Documentation & SOPs

Stakeholder collaboration

Systems engineering support

Education

Engineering/CS/Telecommunications degree

Tools

Type 1/HAIPE encryption devices

Routers/Switches/Firewalls

Job description

Education:

A degree in Engineering, Computer Science, Telecommunications, or a related field.

Clearance:

Must currently hold a Secret Clearance.

Responsibilities:

• Conduct site surveys and implement deployments in government facilities, including OCONUS and tactical environments.
• Support DoD networking architectures, including enclave segmentation, cross-domain considerations, and network boundary defense.
• Design and implement VLANs, including 802.1Q trunking, inter-VLAN routing, and port-channel/trunk configuration across multi-site environments.
• Design and configure VRF for traffic isolation and multi-tenant segmentation on routers and switches.
• Configure and troubleshoot long-haul encrypted routers and link encryptors for secure WAN and satellite backhaul connectivity, including Type 1/HAIPE-compliant encryption devices.
• Configure and troubleshoot routing protocols, including BGP, OSPF, and static routing, in segmented and VRF-aware environments.
• Work with TCP/IP, UDP, Ethernet, MPLS, and QoS.
• Apply information security principles, including confidentiality, integrity, availability, and risk management, within a DoD RMF/ATO context.
• Perform security assessments, vulnerability scans, and risk analysis on ground segment software and network devices, referencing DISA STIGs and NIST 800-53 controls.
• Configure and troubleshoot routers, switches, and firewalls to support end-to-end system readiness.
• Provide systems engineering support for operational equipment, including network infrastructure integration.
• Develop and implement program management plans, equipment test plans, operational readiness plans, and technical requirements.
• Author network diagrams, system administration guides, installation procedures, and standard operating procedures (SOPs) for operational network infrastructure.
• Collaborate with stakeholders across government and commercial sectors.

Required Experience and Skills:

• Minimum 10 years of relevant networking/systems engineering experience with a degree.
• Strong working knowledge of DoD networking architectures, including enclave segmentation, cross-domain considerations, and network boundary defense concepts.
• Hands‑on expertise in VLAN design and implementation across multi‑site environments.
• Hands‑on expertise in VRF design and configuration for traffic isolation and multi‑tenant segmentation.
• Experience configuring and troubleshooting long‑haul encrypted routers and link encryptors, including Type 1/HAIPE‑compliant encryption devices.
• Solid understanding of BGP, OSPF, static routing, TCP/IP, UDP, Ethernet, MPLS, and QoS.
• Solid understanding of information security principles within a DoD RMF/ATO context.
• Ability to perform security assessments using DISA STIGs and NIST 800-53 controls.
• Ability to configure and troubleshoot routers, switches, and firewalls.
• Experience in systems engineering support, network infrastructure integration, program management planning, equipment testing, and operational readiness planning.
• Experience authoring technical documentation, including network diagrams, system administration guides, installation procedures, and SOPs.
• Experience collaborating with government and commercial stakeholders.