Field Network Engineer, ITS Infrastructure (Hybrid, Washington, DC)

About This Role

The DC District Department of Transportation (DDOT) is hiring a hands-on Field Network Engineer as a senior technical resource in its Intelligent Transportation Systems (ITS) program. You will design, deploy, and operate a secure, highly available ITS network (Cisco DMVPN overlay over Metro Ethernet) connecting traffic signals, CCTV, and IoT devices across the District, working across field, data center, and remote environments with a focus on uptime and safety. This is a hybrid role in Washington, DC with travel to field sites.

Responsibilities

• Deploy and support Cisco DMVPN (Phase 2/Phase 3) overlays over Metro Ethernet (IPsec, GRE, NHRP, tunnel interfaces)
• Implement dynamic routing (BGP, OSPF, EIGRP) with failover and LTE/5G backup paths; monitor tunnel health and performance
• Coordinate Metro Ethernet provisioning (E-Line, E-LAN), dual-WAN redundancy, and carrier handoffs; perform field installs and cutovers
• Manage VLANs, IP addressing, Layer 2/3 connectivity, segmentation (VRFs, VLANs, firewall policies), and QoS for signal and video
• Support traffic signal controllers, CCTV, and IoT field devices; migrate remote aggregation points to DMVPN transport
• Ensure encrypted communications and manage VPN certificates and key rotation; support security audits and remediation
• Maintain accurate network documentation (diagrams, IP assignments, inventories, configuration records)

Qualifications

• Bachelor’s in Computer Science, IT, Network Engineering, or related (or equivalent); 11 plus years
• Active CCNA certification (required); CCIE Enterprise, CFOT, Network+/Security+, or ITIL v4 a plus
• ITS experience (traffic signal controllers, CCTV/video transport, traffic management) and prior state or municipal DOT experience
• Cisco DMVPN, IPsec/GRE, dynamic routing (BGP/OSPF/EIGRP), Metro Ethernet, and LTE/5G failover
• High-availability and redundant network design, disaster recovery planning, and fiber optic (single-mode, SFP/SFP+) experience
• Network automation (Ansible or Python) and IoT security/segmentation best practices
• Able to work hybrid in Washington, DC with field work, a valid driver’s license, lifting up to 50 lbs, maintenance windows, and on-call

Required Skills

• Secure overlay networking: Cisco DMVPN (Phase 2/3), IPsec, GRE, NHRP, and dynamic routing (BGP, OSPF, EIGRP)
• WAN transport: Metro Ethernet (E-Line, E-LAN), dual-WAN redundancy, carrier handoffs, and LTE/5G failover
• Network engineering and operations: VLANs, IP addressing, Layer 2/3, segmentation (VRFs), and QoS
• ITS infrastructure transport for traffic signals, CCTV/video, and IoT field devices
• High-availability and redundant design, disaster recovery, and fiber optic (single-mode, SFP/SFP+)
• Network automation (Ansible, Python) and network documentation
• *Software / platforms:* Cisco IOS/IOS-XE routers and switches, DMVPN/IPsec, Ansible, Python; LTE/5G and fiber transport