OverviewPrincipal Network EngineerLOCATION: Hanscom AFB, Bedford, MAJOB STATUS: Full-timeCLEARANCE: SecretSalary Range: 150-180k dependent upon customer requirements when position is awardedTRAVEL: CONUS and OCONUS Astrion has an exciting opportunity for a Principal Network Engineer providing support to the EPASS HB contract at Hanscom AFB.We anticipate this role becoming available to start in December 2025.QUALIFICATIONS:Must have and be able to maintain an active Secret level clearance Must be a US citizenClear understanding of Air Force Engineering, specifically network and communications. PREFERRED QUALIFICATIONS:Bachelor''s or Master''s Degree20+ years of experience with 12+ years of DoD related experienceRESPONSIBILITIES:Systems Engineering & Program SupportConduct program portfolio reviews to evaluate/recommend alternative plans, improve engineering processes, sustain program baselines, and validate system-level performance in accordance with specifications.Prepare technical documentation to define and recommend system/subsystem characteristics; produce management reports and technical presentations for planning, implementation, and corrective actions.Perform validation of systems, including development of criteria and procedures, and evaluate end-to-end communications (from sensor/source through C2 nodes to end users).Provide technical training, program engineering support, and integration/sustainment services for acquisition, deployment/fielding, and operations oversight.Network Engineering & OperationsAnalyze and recommend network requirements, architectures, and infrastructure.Monitor and analyze network workload, capacity, and performance.Diagnose and resolve network problems, ensuring continuity of operations.Recommend and implement backup/recovery procedures.Install, test, maintain, and upgrade network operating systems software.Ensure rigorous application of cybersecurity policies and practices.Support Agile software execution with Government and prime contractors.Support development of service-oriented architectures for software development.Provide life cycle network engineering support for sustainment activities.Create, update, and maintain detailed network design diagrams (Visio) with implementation details (cables, ports, buildings).Collect/analyze operational data to estimate availability and recovery factors.Maintain information on service level agreements (SLAs) and POCs for each pathway.Provide oversight for acquisition and configuration of network management systems.Support troubleshooting and infrastructure upgrades during operational mode.Technical ExpertiseConfigure and troubleshoot network/security technologies: VPN, DMVPN, GRE, IPsec, MACSec/Cisco TrustSec, ACLs, traffic flows, L2/L3 separation, fragmentation.Manage performance parameters: QoS, load balancing, multi-chassis ether channel, stateful switchover, nonstop routing/forwarding, graceful restarts, MTU, policing.Implement and troubleshoot protocols: Unicast/Multicast, BGP, EIGRP, IS-IS, OSPF, RTP, RSTP, STP, MPLS, LDP, VoIP, SNMP.Understand/document network failure identification and recovery procedures.Develop repeatable methods to test network pathways for performance and failure identification.Provide oversight for High Assurance Internet Protocol Encryptor (HAIPE) acquisition, configuration, and remote management systems.Understand security boundary designs (e.g., Cross Domain Solutions).Facilitate DISA engineering for communications pathways using Commercial Ethernet Gateway architectures.Assist in the acquisition of DISA point-to-point circuits.