Network Engineer II

Job Details

• Position: Network Engineer II (Contract)
• Duration: 6‑Month contract with extension possibility
• Location: Chesapeake, VA (Onsite)
• Employment type: Contract (No C2C Candidates)
• Local Candidates Only!

• Implementation & Operations: Execute complex network changes, configurations, and upgrades, ensuring high availability and minimal disruption.
• Routing & Switching: Design, configure, and troubleshoot advanced Layer 2 and Layer 3 environments utilizing protocols like OSPF and EIGRP, and ensuring gateway redundancy (HSRP, VRRP, GLBP).
• Network Security: Implement and manage firewall rules (NAT, stateful inspection, ACLs) and troubleshoot Layer 4‑7 application issues (DNS, DHCP, HTTP/S).
• Wireless: Configure, manage, and troubleshoot enterprise Wi‑Fi systems, including Wireless LAN Controllers (WLCs), advanced security (802.1X, WPA3), and basic RF design principles.
• Access Control (NAC): Configure and maintain Network Access Control systems (e.g., Cisco ISE or Aruba Clear Pass) for device profiling, posture assessment, and role‑based access policy enforcement.
• Mentorship & Documentation: Act as a technical resource, mentoring junior team members and owning change‑control processes and technical documentation.
• Advanced Concepts: Assist in projects involving emerging technologies and advanced concepts, including an introduction to VRFs, BGP, and MPLS.

• Advanced: VLAN design, trunking protocols, Ether Channel/LACP, and meticulous STP tuning (Port Fast, BPDU Guard, Root Guard).
• Expertise: Configuration and troubleshooting of OSPF and EIGRP.
• Redundancy: Implementation of redundant gateway protocols (HSRP, VRRP, GLBP).
• Introductory: Understanding of VRF (Virtual Routing and Forwarding) and route‑leaking concepts.

• Firewall: Hands‑on experience with stateful inspection, NAT, and Access Control Lists (ACLs).
• Troubleshooting: Proficient in application‑layer troubleshooting for core services like DNS, DHCP, HTTP, and HTTPS.
• QoS: Basic understanding of Quality of Service (QoS) classification, marking, and queuing.
• Configuration: Experience with Wireless LAN Controller (WLC) setup and management.
• Security: Strong familiarity with 802.1X and RADIUS authentication integration.
• Troubleshooting: Ability to diagnose and resolve common wireless issues (roaming, coverage, throughput).

• Platform
  
  Experience:
  
  Practical familiarity with platforms such as Cisco ISE and/or Aruba Clear Pass (CPPM).
• Policy: Understanding of device profiling, posture assessment, and implementing role‑based access policies.

• Basic understanding of BGP and MPLS protocols.
• Familiarity with foundational concepts of SD‑Access or SD‑WAN.

• 2‑4 years of experience in network engineering or a similar technical role.
• Strong analytical and problem‑solving skills, with a focus on root‑cause analysis.
• Excellent written and verbal communication skills for technical documentation and team collaboration.
• Demonstrated ownership of change control procedures and project documentation.

On call – once every 8‑10 weeks.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non‑discrimination in employment in every location in which the company has facilities.

This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

No second parties will be accepted.