DDOT - Field Network Engineer - Infras
Listed on 2026-10-18
-
IT/Tech
Systems Engineer, Cybersecurity -
Engineering
Systems Engineer, Cybersecurity
Rate: $55.00/hr on W2
Worksite Address: Washington, DC
Duration: 11/16/2026 to 09/30/2027
Submittals due: 10/22/2026
Interviews: Both Webcam and In Person
Short DescriptionDDOT is seeking a hands-on Field Network Engineer to serve as a senior technical resource within the Intelligent Transportation Systems (ITS) program.
Complete DescriptionThe District Department of Transportation (DDOT) is seeking a hands-on Field Network Engineer to serve as a senior technical resource within the Intelligent Transportation Systems (ITS) program. This role is responsible for the design, deployment, and day-to-day operations of a secure, highly available ITS network connecting traffic signals, video surveillance systems, and IoT devices across the District of Columbia.
The network environment leverages Metro Ethernet services as the transport underlay and a Cisco DMVPN secure overlay to link distributed field sites back to DDOT’s headend facilities and data centers. The engineer will work in both field and datacenter environments, with a focus on uptime, safety, and reliability in mission-critical operations.
Key Responsibilities DMVPN & Secure Overlay Networking- Deploy and support Cisco DMVPN (Phase 2/Phase
3) hub-and-spoke and spoke-to-spoke overlay networks across Metro Ethernet transport. - Configure and troubleshoot IPsec VPN profiles, GRE tunnels, NHRP mappings, and tunnel interfaces for the DMVPN fabric.
- Implement dynamic routing protocols (BGP, OSPF, EIGRP) over DMVPN tunnels to support automated failover and optimal path selection.
- Design failover and redundancy strategies, including LTE/5G backup paths, to ensure uninterrupted connectivity during circuit or equipment outages.
- Monitor tunnel health, latency, and throughput to maintain performance standards across all VPN connections.
- Coordinate with service providers on Metro Ethernet circuit provisioning (E-Line, E-LAN), turn‑up, and incident resolution.
- Manage dual‑WAN redundancy models and carrier handoff configurations at each site.
- Perform field installations and cutovers of routers, switches, cabinets, and handoff equipment.
- Manage VLAN configurations, IP addressing schemes, and Layer 2/Layer 3 connectivity between remote aggregation points and headend data centers.
- Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains.
- Apply and tune QoS policies to prioritize latency-sensitive traffic such as signal control and video.
- Troubleshoot network issues end-to‑end from field site through WAN transport to data center.
- Maintain accurate network documentation including diagrams, IP assignments, equipment inventories, and configuration records.
- Support Dot’s traffic signal control systems, CCTV/video surveillance platforms, and IoT field devices by ensuring reliable, low-latency transport connectivity.
- Coordinate field cabinet upgrades to accommodate new network equipment, including power and environmental requirements.
- Manage the migration of remote aggregation points from legacy infrastructure to modern DMVPN-based transport.
- Monitor network performance, availability, and service‑level compliance across all ITS transport links.
- Ensure all network connections utilize encrypted communications per DDOT and District government security policies.
- Manage VPN certificate life cycles, key rotation, and trust domain configurations.
- Implement IoT security and segmentation best practices for field‑deployed devices.
- Support security audits, vulnerability assessments, and remediation efforts on ITS network infrastructure.
- Combination of field work (street-level cabinets, utility corridors), data center operations, and remote support.
- Travel to field locations across the District required; valid driver’s license required.
- Ability to lift and rack network equipment up to 50 lbs.
- Participation in scheduled maintenance windows and on‑call availability for after‑hours emergency response.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).