Network Engineer II

Network Engineer II
6 Month Contract with Extension Possibility Onsite Local Candidates Only! Chesapeake, VA
No C2C Candidates
We are seeking a highly motivated and skilled Network Engineer II to join our implementation and operations team. This role is crucial for designing, configuring, implementing, and maintaining robust, secure, and high-performance network infrastructure. The ideal candidate will possess an in-depth understanding of Layers 2 through 7 of the OSI model, with a specific focus on switching, enterprise routing, firewalls, Wi-Fi, and Network Access Control (NAC) solutions.

Core Responsibilities

• Implementation & Operations: Execute complex network changes, configurations, and upgrades, ensuring high availability and minimal disruption.

• Routing & Switching: Design, configure, and troubleshoot advanced Layer 2 and Layer 3 environments utilizing protocols like OSPF and EIGRP, and ensuring gateway redundancy (HSRP, VRRP, GLBP).

• Network Security: Implement and manage firewall rules (NAT, stateful inspection, ACLs) and troubleshoot Layer 4-7 application issues (DNS, DHCP, HTTP/S).

• Wireless: Configure, manage, and troubleshoot enterprise Wi-Fi systems, including Wireless LAN Controllers (WLCs), advanced security (802.1X, WPA3), and basic RF design principles.

• Access Control (NAC): Configure and maintain Network Access Control systems (e.g., Cisco ISE or Aruba ClearPass) for device profiling, posture assessment, and role-based access policy enforcement.

• Mentorship & Documentation: Act as a technical resource, mentoring junior team members and taking ownership of change control processes and technical documentation.

• Advanced Concepts: Assist in projects involving emerging technologies and advanced concepts, including an introduction to VRFs, BGP, and MPLS.

Required Technical Skills and Expertise

Layer 2 / Layer 3 Networking

• Advanced: VLAN design, trunking protocols, EtherChannel/LACP, and meticulous STP tuning (PortFast, BPDU Guard, Root Guard).

• Expertise: Configuration and troubleshooting of OSPF and EIGRP.

• Redundancy: Implementation of redundant gateway protocols (HSRP, VRRP, GLBP).

• Introductory: Understanding of VRF (Virtual Routing and Forwarding) and route leaking concepts.

Security & Application Layers (L4-L7)

• Firewall: Hands-on experience with stateful inspection, NAT, and Access Control Lists (ACLs).

• Troubleshooting: Proficient in application layer troubleshooting for core services like DNS, DHCP, HTTP, and HTTPS.

• QoS: Basic understanding of Quality of Service (QoS) classification, marking, and queuing.

Enterprise Wi-Fi

• Configuration: Experience with Wireless LAN Controller (WLC) setup and management.

• Security: Strong familiarity with 802.1X and RADIUS authentication integration.

• Troubleshooting: Ability to diagnose and resolve common wireless issues (roaming, coverage, throughput).

Network Access Control (NAC)

• Platform Experience: Practical familiarity with platforms such as Cisco ISE and/or Aruba ClearPass (CPPM).

• Policy: Understanding of device profiling, posture assessment, and implementing role-based access policies.

Emerging Technologies (A Plus)

• Basic understanding of BGP and MPLS protocols.

• Familiarity with foundational concepts of SD-Access or SD-WAN.

Qualifications

• 2-4 years of experience in network engineering or a similar technical role.

• Strong analytical and problem-solving skills, with a focus on root cause analysis.

• Excellent written and verbal communication skills for technical documentation and team collaboration.

• Demonstrated ownership of change control procedures and project documentation.

On call - Once every 8-10 weeks