Position Summary

The Mission Network Engineer is responsible for maintaining, securing, and evolving complex network environments that support enterprise information systems, remote ISR systems, research and development activities, and mission-specific operations. These environments include physical and virtual infrastructure, Linux-based systems, multiple network paths, secure remote access, overlay networks, layered security controls, and unique communications architectures.

This role requires more than traditional enterprise network administration. The ideal candidate has a broad technical foundation across networking, Linux, virtualization, secure communications, systems integration, and special or non-standard communications TTPs. The Mission Network Engineer will support secure connectivity, segmentation, traffic protection, low-signature communications, obfuscation, anonymity, and resiliency techniques in accordance with authorized requirements, applicable policy, export control requirements, access management procedures, and operational security standards.
What You'll Do

• Design, build, configure, maintain, and troubleshoot complex commercial, classified, con-trolled, and mission-specific network environments
• Support network infrastructure for enterprise information systems, remote ISR systems, and distributed operational environments
• Configure and manage routing, switching, firewalls, VPNs, secure remote access, wire-less networking, virtual networking, Linux networking, and network security appliances
• Implement secure tunneling, remote access, mesh VPN, site-to-site VPN, overlay net-working, and resilient communications solutions using technologies such as WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools
• Develop and maintain secure network architectures that support segmentation, access control, traffic protection, low-signature communications, obfuscation, monitoring, and operational security requirements
• Troubleshoot complex connectivity and performance issues across physical networks, virtual networks, Linux systems, VPNs, cloud services, endpoints, servers, security tools, ISR systems, and mission applications
• Monitor network performance, analyze traffic, conduct packet capture, and provide recommendations for reliability, capacity, security, and quality of service
• Plan and execute network upgrades, expansion, lifecycle management, configuration changes, and technical improvements to support evolving mission and enterprise requirements
• Evaluate, test, and integrate new network technologies, communications tools, open-source platforms, appliances, and services
• Support network security, compliance, and incident response activities, including firewall policy management, segmentation, logging, IDS/IPS integration, vulnerability remediation, documentation, and audit support
• Create and maintain network diagrams, technical documentation, configuration baselines, standard operating procedures, implementation guides, records, and reports
• Coordinate with systems administrators, cybersecurity teams, vendors, cross-functional technical teams, and mission stakeholders to resolve issues and support project delivery
• Provide technical guidance to less-experienced staff as needed.

What You Bring

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Communications Systems, or related discipline. Relevant military, government, or industry experience may be considered in lieu of degree
• Minimum 7 years of experience designing, administering, securing, and troubleshooting complex network environments in secure, classified, mission-critical, operational, or highly technical settings
• Broad hands-on knowledge across networking, Linux, virtualization, secure communications, systems integration, and operational infrastructure
• Strong experience with TCP/IP, routing, switching, VLANs, subnetting, DNS, DHCP, NAT, firewalls, VPNs, wireless networking, secure remote access, Linux networking, and command-line troubleshooting
• Experience designing and supporting physical, virtual, cloud, hybrid, distributed, Linux-based, or mission-specific network architectures
• Experience with network, firewall, VPN, and routing technologies such as Cisco, Juniper, Palo Alto, Fortinet, Aruba, Ubiquiti, MikroTik, pfSense, OPNsense, WireGuard, NetBird, Tailscale, OpenVPN, IPsec, or equivalent tools
• Experience with secure tunneling, overlay networks, mesh VPNs, redundant connectivity, failover, virtual appliances, and resilient communications architectures
• Experience supporting remote systems, distributed infrastructure, fielded technical systems, ISR systems, tactical networks, expeditionary networks, or other non-standard communications environments preferred
• Understanding of OPSEC-informed network design, traffic protection, infrastructure concealment, anonymity, obfuscation, low-signature communications, and secure communications techniques
• Experience with network monitoring, packet capture, logging, SIEM, IDS/IPS, vulnerability remediation, scripting, automation, technical documentation, and compliance frameworks such as NIST 800-171, DFARS [redacted], CMMC, or RMF
• Strong communication skills and ability to work independently in ambiguous environments while developing practical solutions for unique operational requirements
• Must be a U.S. citizen with the ability to obtain and maintain a U.S. Government security clearance.

Additional Eligibility Qualifications

• Experience supporting U.S. Government, DoD, military, intelligence, SOF, ISR, EW, cyber, or other national security environments
• Experience supporting classified, compartmented, protected, or controlled network environments such as SIPR, JWICS, SAP, SCI, or equivalent environments
• Previous military, defense, government, or operational experience involving secure communications, mission networks, tactical networking, remote ISR systems, or non-standard communications architectures
• Experience with SOF, JSOC, Special Operations, intelligence, U.S. National Laboratories, protected research environments, restricted engineering environments, or similar security-sensitive technical organizations preferred
• Familiarity with zero-trust architecture, cross-domain solutions, network segmentation, secure transport, tunneling, overlay networks, mesh VPNs, traffic shaping, network obfuscation, anonymity, and low-signature infrastructure concepts
• Experience supporting networks with unique OPSEC, access control, attribution-management, export control, or infrastructure protection requirements
• Completion of relevant operational network and secure communications training preferred, including operational infrastructure, remote bridging, network analysis, Linux for operators, digital signature reduction, tunneling, secure transport, and operational network infrastructure
• Experience developing or supporting incident response playbooks, internal security audits, vulnerability management activities, inspections, or accreditation efforts
• Certifications such as CCNA, CCNP, CompTIA Network+, Security+, CySA+, CISSP, Pa-lo Alto, Fortinet, Juniper, Linux+, cloud networking, or equivalent certifications in networking, security, cloud, or infrastructure engineering
• Active Secret, Top Secret, or TS/SCI clearance preferred

Benefits

• Comprehensive medical plan options
• HSA/FSA accounts
• Dental and vision coverage
• 6% employer 401(k) match
• Fully paid parental leave for all new parents
• Generous PTO
• Life and disability insurance
• Long-term and Short-term disability coverage
• AD&D Coverage
• Pet Insurance
• Employee Assistance Program
• Subsided gym membership / plans through Wellhub

Work Authorization / Security Clearance

• Applicants must be legally authorized to work in the United States.
• This position requires eligibility to obtain a TS/SCI clearance. U.S. citizenship is required. Candidates will be subject to a background investigation in accordance with federal requirements.

Position Type and Expected Hours of Work

This is a full-time exempt position with typical working hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. Hours and work shifts may change in accordance with department and business needs.
Work Environment

Washington DC, North Carolina or Annapolis Junction, MD
Travel

Frequent travel to our US facilities (FL, DC, MD, NY, and CA) and overseas locations as required.

Our Firmware

At Metrea, our single core value is Rooted in Humility, and our four cornerstone attributes are Entrepreneurial, Systematic, Discerning, and Over-Deliver. These form what we call our Teammate Firmware. Just like technical firmware connects software and hardware, our Firmware is the constant interface between our mission and our people. It defines how we show up, how we work together, and how we solve complex problems.

Our team Firmware creates a web-like, hyper-collaborative, dynamically hierarchical way of working that helps us adapt quickly, communicate openly, and distribute decision-making to where expertise actually lives. It enables groups to self-organize around hard problems, shift fluidly as priorities evolve, and operate with the trust, curiosity, and discipline required in a complex mission space. This foundation allows us to deliver elegant, effective solutions and uphold our purpose: protecting our precious inheritance.