Network Engineer III

Experience leading endtoend network testing and validation, including performance, resiliency, and failover testing in complex, distributed environments, and developing/executing implementation plans for network upgrades, migrations, and enhancements while minimizing mission impact; experience with voice and realtime services over IP (e.g., VoIP, SIP trunking, QoS) in converged voice/data networks is highly desired. Deep technical expertise with routing and switching in enterprise or mission networks, including route filtering, convergence tuning, VLAN/VXLAN, spanningtree variants, MLAG/portchanneling, QoS and traffic engineering, and tuning network security controls (e.g., firewalls, IDS/IPS, NAC, endpoint protection); Cisco CCNP (or higher, such as CCIE) certification is strongly preferred.

DPP is seeking a Network Engineer III for an opportunity with our client in the Aerospace and Defense Manufacturing industry.
 
Work location: Onsite in San Antonio, TX
Duration: 7 months
Terms: W2 Contract
Work authorization: US Citizen; must hold a current/active Top-Secret clearance with SCI eligibility
 
Position Summary:

• The Network Engineer III will support our Engineering & Sciences San Antonio department.
• As a member of the San Antonio department, you’ll get to help architect and build a launch execution network, building and sustaining highavailability launch and missile test networks that span classified and unclassified enclaves.
• As a networkstrong engineer with meaningful cyber depth, you will lead network design, implementation, and performance tuning while partnering with cyber teams to embed RMFaligned protections and secure baselines into the infrastructure.

Responsibilities:

• Design and plan network communications systems.
• Provide specifications and detailed schematics for network architecture.
• Provide specific detailed information for hardware and software selection, implementation techniques and tools for the most efficient solution to meet business needs, including present and future capacity requirements.
• Conduct testing of network design.
• Maintain technical expertise in all areas of network and computer hardware and software interconnection and interfacing, such as routers, multiplexers, firewalls, hubs, bridges, gateways, etc.
• Evaluates and reports on new communications technologies to enhance capabilities of the network.
• Serve as a network engineer on a multidisciplinary team, designing and sustaining complex, multinode launch and test networks spanning classified and unclassified enclaves.
• Work with customer ISSMs/ISSOs and cyber engineering teams to develop and implement network changes in environments operating under, or seeking, an ATO/IATT, ensuring network designs align with RMF/ATO requirements.
• Design, plan, configure, and maintain enterprisescale network communications systems, delivering and maintaining detailed schematics and specifications for routers, switches, firewalls, multiplexers, bridges, gateways, and related hardware/software.
• Lead endtoend testing of network designs, validate configurations, and monitor hardware and link performance to ensure proper settings, reliability, availability, and compliance with security policies and control objectives.
• Develop and execute implementation plans for network enhancements, upgrades, and migrations, coordinating with stakeholders to minimize service disruption and thoroughly documenting all changes and rollback plans.
• Engineer and operate core network services (e.g., DNS, DHCP, NTP, AAA) and segmented architectures that enforce welldefined trust boundaries and enable controlled information sharing between multiple enclaves.
• Support the architecture and design of bakedin cybersecurity protections by implementing and tuning networklevel security controls (e.g., firewalls, VPNs, ACLs, IDS/IPS, NAC) in close coordination with cyber/security teams.
• Participate in network operations activities (fault/performance monitoring, incident response support, change management), using NMS/monitoring tools and log/SIEM platforms as part of an integrated NOC/SOC construct.
• Perform physicallayer installation tasks (e.g., fiber, patch panels, encryption devices) and ensure accurate asbuilt documentation and configuration baselines are maintained.
• Produce periodic status reports, engineering change documentation, and network design artifacts; communicate technical options, tradeoffs, risks, and recommendations to internal and external stakeholders.

Required Qualifications:

• Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline from an accredited institution and 8 years of related professional/military experience in engineering;
• OR a Master’s degree in a STEM discipline and 6 years of related experience;
• OR a Ph.D. in a STEM discipline and 4 years of related experience.
• US Citizenship with a current DoD Top Secret security clearance and SCI eligibility/access that has been active within the last 24 months.
• DoD 8570 IAT Level II certification (e.g., Security+ CE) or equivalent prior to start.
• Hands on experience planning, implementing, operating, and troubleshooting routed and switched IP networks (e.g., IPv4, OSPF, VLANs, VPNs, firewalls) in mission critical or real time environments, including administration of Microsoft and Linux networked systems and applying foundational cybersecurity practices (e.g., hardening, secure configuration, access control) in collaboration with cyber/security teams.

Preferred Qualifications:

• Proven experience acting as a network design authority or principal engineer for new deployments or major redesigns, from concept through implementation and cutover, including high and lowlevel designs, ICDs, addressing and routing plans, firewall/ACL matrices, and NOC runbooks.
• Extensive handson experience designing, implementing, and maintaining enterprisescale physical and virtual networks (e.g., Cisco routing/switching, firewalls, VPNs, VMware vSphere/ESXi/NSX) with wellmaintained network schematics and configuration baselines.
• Deep technical expertise with routing and switching in enterprise or mission networks, including route filtering, convergence tuning, VLAN/VXLAN, spanningtree variants, MLAG/portchanneling, QoS and traffic engineering, and tuning network security controls (e.g., firewalls, IDS/IPS, NAC, endpoint protection); Cisco CCNP (or higher, such as CCIE) certification is strongly preferred.
• Experience architecting and supporting multinode test or launch networks for missile test ranges, weapon systems, or other realtime mission systems, where latency, determinism, and availability are critical.
• Strong experience in engineering and securing DNS, DHCP, NTP, and AAA (RADIUS/TACACS+) within missioncritical networks, including splithorizon DNS, DNSSEC, DHCP authorization, authenticated NTP, and integration of these services with identity systems (e.g., Active Directory, identity management solutions).
• Extensive experience designing segmented architectures (user, server, management, security, outofband components) with welldefined trust boundaries in multidomain or crossdomain environments, including segregation and controlled information sharing between classified and unclassified networks using solutions such as guards, data diodes, and MLS/CDS systems.
• Demonstrated ability to align network architecture with RMF/ATO requirements and apply DISA STIGs/CIS benchmarks to routers, switches, firewalls, VPN gateways, and other network appliances, building standard network baselines (AAA, logging, NTP, SNMP, management access, banners, crypto settings) and verifying compliance at scale.
• Proficiency in automation, configuration management, and InfrastructureasCode for network automation (e.g., Ansible, Python, Bash, PowerShell, or similar tools), including device provisioning, configuration templating, drift detection, bulk policy updates (ACLs, QoS, routing policies), and automated compliance checks.
• Experience working within an integrated Network Operations Center (NOC) (fault/performance monitoring, event correlation, escalation workflows, collaboration with SOC personnel) combined with strong troubleshooting skills across layers 1–7 and a track record of restoring service quickly in complex environments.
• Experience leading endtoend network testing and validation, including performance, resiliency, and failover testing in complex, distributed environments, and developing/executing implementation plans for network upgrades, migrations, and enhancements while minimizing mission impact; experience with voice and realtime services over IP (e.g., VoIP, SIP trunking, QoS) in converged voice/data networks is highly desired.
• Strong interpersonal, written, and verbal communication skills; demonstrated ability to work with crossfunctional cyber, systems, software, and test teams to capture requirements, document designs and decisions, and brief options, tradeoffs, risks, and recommendations to both technical stakeholders and leadership/customer representatives.

Interested? Learn more:
Click the apply button to learn more about this position (#26-01018).
 DP Professionals (DPP) offers a range of compensation and benefits packages to our employees and their eligible dependents. DPP is a certified Woman-owned Small Business Enterprise (WBE and WOSB) with more than 25 years in the staffing industry. EOE/AA/V/D