Principal Network Access Control; NAC) Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time DISA Headquarters - DC, Fort Meade, MD, US

2 days ago Requisition

Salary Range: $ To $ Annually

GES is seeking a Principal Network Engineer specializing in enterprise wireless infrastructure to design, implement, and modernize a large-scale, geographically distributed wireless network environment.

The successful candidate will serve as a senior technical engineer responsible for migrating Aruba wireless controllers to a centralized cloud-hosted environment, implementing Aruba Central, improving wireless network resiliency, and standardizing wireless security and access-control capabilities.

This position requires extensive experience with Aruba wireless technologies, enterprise networking, wireless security, high availability, and network access control. The engineer will collaborate with cloud, network, cybersecurity, identity management, and monitoring teams to deliver reliable, scalable, and secure wireless infrastructure.

The engineer will support architecture, implementation, integration, testing, migration, documentation, and transition to operations while providing technical direction to other engineering personnel.

Days Required in Office:
Five Days in Office Until Acclimated and then possibly One Day Remote

Clearance Required:

Secret

• Design, engineer, and implement the migration of existing Aruba wireless controllers to a centralized cloud-hosted infrastructure.
• Deploy and configure Aruba Central for centralized wireless management, configuration standardization, monitoring, and operational visibility.
• Develop controller migration strategies, implementation procedures, validation plans, and rollback processes.
• Standardize NTP configurations across wireless controllers, access points, and supporting network infrastructure.
• Evaluate and establish wireless deployment standards, including bridge versus tunnel mode and campus versus remote architectures.
• Develop standardized configurations and deployment playbooks for geographically distributed sites.
• Coordinate cloud infrastructure integration, including connectivity, routing, security requirements, and availability.

• Design and implement Layer 2 and Layer 3 redundancy to improve wireless availability and service continuity.
• Configure and validate controller failover, preemption, and recovery to preferred controllers following service restoration.
• Implement and troubleshoot VRRP, virtual IP addressing, and controller high-availability configurations.
• Evaluate and optimize DHCP, GRE tunnels, routing, and wireless traffic forwarding across centralized and distributed environments.
• Develop and execute failover and recovery testing to validate wireless resiliency.
• Troubleshoot complex controller, routing, and wireless connectivity issues.

• Design and implement enterprise wireless security standards, including WPA3, Wireless Intrusion Detection Systems (WIDS), and identity-based access controls.
• Configure wireless security policies through Aruba Central and validate deployment to controllers and access points.
• Evaluate hardware compatibility and develop migration strategies for WPA3 adoption, including transition-mode considerations.
• Standardize wireless configurations, including 5 GHz operation, authentication, and security settings.
• Integrate wireless infrastructure with Cisco ISE, Aruba Clear Pass, and enterprise identity services.
• Configure and troubleshoot 802.1X, RADIUS, EAP-TLS, certificate-based authentication, and wireless access policies.
• Coordinate identity-based policy integration with Microsoft Entra , VPN infrastructure, and firewall enforcement.

• Integrate Aruba Central with Science Logic SL1 to support wireless monitoring, alerting, device discovery, and performance visibility.
• Coordinate with monitoring engineers to establish required APIs, monitoring policies, and operational dashboards.
• Validate controller status, access point availability, authentication health, and wireless performance monitoring.
• Support integration with enterprise DNS, DHCP, NTP, routing, and security infrastructure.
• Identify opportunities to automate wireless configuration, monitoring, and…