Network Engineer I

Network Engineer

SMS is seeking an experienced Network Engineer to support AFRL Enterprise networking at the Air Force Research Laboratory (AFRL). This position focuses on the engineering, implementation, operation, and sustainment of AFRL's enterprise and laboratory networking infrastructure in support of research and development missions. The Network Engineer will design, configure, troubleshoot, and optimize routed and switched networks, boundary protections, and encrypted transport services. The environment is Ruckus-centric with a transition toward Cisco, requiring a strong foundation in vendor-agnostic networking principles and hands-on experience with enterprise-class hardware. As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity. SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers' missions for more than 47 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Responsibilities

Design, implement, maintain, monitor, and support AFRL enterprise and laboratory network infrastructure.

Ensure network availability, reliability, performance, and security for mission-critical research environments.

Configure, operate, and troubleshoot Layer 2 and Layer 3 network components, including switching, routing, and wireless infrastructure.

Implement and maintain secure network segmentation, ACLs, and boundary controls

Support encrypted transport and secure communications using TACLANE / HAIPE devices.

Monitor network performance, analyze traffic patterns, and optimize throughput, latency, and resilience.

Troubleshoot complex network issues involving routing protocols, MTU, QoS, packet loss, and latency.

Design and support IPv4 and IPv6 network designs and operational environments.

Ensure compliance with DoD networking and cybersecurity requirements, including NIST and DISA STIG guidance.

Collaborate with local, enterprise, and cybersecurity teams to ensure network solutions meet operational and security requirements.

Maintain accurate documentation, including network diagrams, topology maps, configuration standards, change records, and root cause analyses

Qualifications

Required Experience and Skills

• 5+ years of experience in network engineering or enterprise network operations.
• Strong knowledge of routing and switching technologies, including: OSPF, BGP, and static routing; VLANs, trunking, spanning tree; QoS and traffic shaping; ACLs and network segmentation.
• Experience with wired and wireless networking (fiber and copper).
• Hands-on experience with Ruckus and Cisco network equipment (mixed-vendor environments).
• Experience configuring and supporting IPSec, VPNs, and encrypted network transport.
• Familiarity with network encryption devices (TACLANE / HAIPE).
• Experience working within DoD, federal, or other highly regulated environments.
• Strong troubleshooting skills and experience with network monitoring and diagnostic tools (e.g., SolarWinds, Wireshark).
• Excellent documentation, communication, and collaboration skills.

Required Certifications

• CompTIA Security+ CE (DoD 8570/8140 IAT Level II)
• One of the following (or equivalent): Cisco Certified Network Professional (CCNP) - preferred; Cisco Certified Network Associate (CCNA) with demonstrated enterprise experience; Ruckus Certified Networking Associate (RCNA) with demonstrated enterprise experience.
• Ability to obtain and maintain an active DoD Secret security clearance (or higher)

Experience That Will Make You Stand Out

• CCNP Enterprise or equivalent professional-level certification.
• Experience with Ruckus switching and wireless platforms.
• Familiarity with network automation or scripting tools (e.g., Ansible).
• Working knowledge of certificate-based authentication from a networking perspective.
• Experience with NIPRNet, DREN, RDT&E, or other DoD research networks/laboratory environments.