Job SummaryJCS Solutions is looking for a
Principal Network Engineer - Wireless to lead the engineering, deployment, and modernization of a large, geographically distributed enterprise wireless network supporting the Department of Defense. You will be the technical lead for Aruba wireless architecture, RF performance, secure network access, integration, troubleshooting, and transition to operations.
The environment includes:Aruba AOS 10
Aruba Central On-Premises
Distributed Aruba ClearPass
Cisco ISE coexistence
Certificate-based 802.1X authentication
Comply-to-Connect enforcement
Wireless intrusion detection and prevention (WIDS/WIPS)
Enterprise monitoring
You'll work with network, identity, cybersecurity, and operations teams to deliver secure, reliable wireless services at scale.
Location: Fort Meade, MD
Shift: full-time, day-shift role
Clearance: Secret
Certification: Active DoD 8140/8570 IAT Level II certification
What's in it for you: - Join a premier technology firm specializing in innovative solutions.
- Be part of a collaborative, inclusive, and innovative work culture.
- Enjoy tremendous growth potential in a high-performing team environment.
- A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!
What you will do:Wireless Architecture and Deployment
- Design, deploy, configure, and optimize enterprise Aruba wireless infrastructure, including access points, gateways, management platforms, redundancy, and lifecycle upgrades.
- Engineer and maintain Aruba Central On-Premises and AOS 10 configurations, provisioning workflows, high availability, and enterprise configuration standards.
- Lead RF design, site surveys, channel and power planning, capacity analysis, roaming optimization, and wireless QoS for voice and mission-critical applications.
- Network Access Control and Security
- Integrate Aruba ClearPass and Cisco ISE with 802.1X/EAP-TLS, RADIUS, certificate-based authentication, endpoint profiling, and Comply-to-Connect policies.
- Engineer wireless security controls, including network segmentation, WPA3, WIDS/WIPS, secure guest access, and approved cryptographic configurations.
- Work with cybersecurity teams on DoD security controls, STIGs, vulnerability remediation, testing, and accreditation evidence.
- Integration, Troubleshooting, and Leadership
- Integrate wireless services with wired switching, VLANs, routing, DNS/DHCP, firewalls, identity systems, and enterprise monitoring platforms.
- Lead complex troubleshooting and root cause analysis involving RF, client connectivity, roaming, authentication, certificates, and network performance.
- Provide technical direction and mentoring to engineering teams. Review designs and implementation plans, and communicate technical risks and recommendations to program and government stakeholders.
- Plan and carry out engineering changes, upgrades, testing, deployment waves, and operational handoffs, with validation and rollback procedures.
- Documentation Develop and maintain:
- Wireless architecture and RF designs
- Configuration baselines
- Access-control and security designs
- Implementation and test plans
- Site-survey results
- Troubleshooting guides
- Standard operating procedures
- As-built and transition documentation
What you will bring: - Significant hands-on experience designing, deploying, and troubleshooting enterprise wireless networks across multiple sites.
- Strong experience with Aruba wireless platforms and management, including access points, gateways/controllers, and Aruba Central or comparable enterprise management tools.
- Strong knowledge of 802.11 and RF engineering, including coverage, interference, capacity, roaming, and wireless performance troubleshooting.
- Experience with enterprise wireless authentication and access control, including 802.1X, RADIUS, certificates, and Aruba ClearPass or comparable NAC platforms.
- Working knowledge of wired network dependencies, including TCP/IP, VLANs, routing, switching, firewalls, and network segmentation.
- Experience leading technical implementation activities, troubleshooting complex issues, and producing engineering and operational documentation.
- Strong written and verbal communication skills, and the ability to coordinate across technical teams and customer stakeholders.
- Must meet DoD cybersecurity workforce qualification requirements for the position.
- Required Certifications
- An active DoD 8140 IAT Level II certification, such as one of the following: Security+ CE, CySA+, CASP+ CE, CCNA-Security, CCNP Security, CCSP, CISA, CISSP (or Associate), CND, GCED, GCIH, GICSP, GSEC, or SSCP Certification in Governance of Enterprise IT (CGEIT).
- Education Requirements
- Bachelor's degree with 12+ years of relevant experience, or
- Master's degree with 10+ years of relevant experience.
- Additional relevant experience may be considered in lieu of a degree.
How you will wow us:- Aruba professional or expert certifications; relevant Cisco or security certifications.
- Experience with AOS 10 and clustered Aruba Central On-Premises deployments at large enterprise scale.
- Experience with distributed ClearPass clusters, FIPS configurations, Cisco ISE coexistence, and phased Comply-to-Connect rollout.
- Experience with Wi-Fi 6/6E/7, high-density RF surveys, voice roaming optimization, and tools such as Ekahau or AirMagnet.
- Experience with WIDS/WIPS, guest wireless separation, WPA3, and DoD STIG/RMF processes.
- Experience with REST APIs, SNMPv3, enterprise monitoring, Python/Ansible automation, or wireless telemetry integration.
- Experience supporting large-scale DoD or classified network environments.
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00
NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team willonlycome from @JCSSolutions.com. We want to emphasize thatwe do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.
