{"schemaVersion":"jobsearcher.job.v1","id":"8c58f4be43920ed42ddc9f0a","url":"https://jobsearcher.com/jobs/8c58f4be43920ed42ddc9f0a","canonicalUrl":"https://jobsearcher.com/jobs/8c58f4be43920ed42ddc9f0a","title":"Hardware Network Engineer","description":"THE ROLENextgenID is hiring a Hardware / Network Engineer to own our kiosk and mobile kit hardware from build to field support. We operate 250 or more self-service kiosks that verify identity for government and enterprise sites, scaling to 400 or more over the next 18 to 24 months. You build units, wire and rewire parts, swap devices, trace power, configure networks, and fix faults. You keep every unit identical, documented, and ready to ship.This is a hands-on job, not a design-only or advisory one. Reporting directly to the CTO & EVP, you work alongside software engineering, operations, field service, and client solutions so every unit ships reliable, connected, and secure. Our kiosks process identity verification transactions in government and enterprise environments, which makes uptime, security, and network resilience non-negotiable.ROLE FIT & NON-NEGOTIABLESOnsite in Fairfax, VA. Remote is not available.U.S. citizen required for ITAR and government customer obligations.Comfortable with physical hardware — assembly, wiring, cabling, and bench testing — as well as network configuration and troubleshooting.Hands-on ownership of kiosk hardware and network infrastructure, including the power path and the field faults that come with it.Comfortable working to a documented standard: every unit identical, tested, and traceable.WHAT YOU WILL OWN (90 TO 180 DAY OUTCOMES)A documented and standardized kiosk hardware bill of materials, assembly process, and QA acceptance criteria that produce consistent build qualityA repeatable hardware provisioning pipeline: image, configure, test, and ship units with minimal manual interventionAn audited and hardened kiosk network architecture: VPN tunnels, firewall rules, cellular LTE or 5G failover, and remote management access across the deployed fleetHardware lifecycle management: inventory tracking, warranty and RMA processes, component obsolescence planning, and a spare parts strategyMonitoring and alerting for hardware health: temperature, connectivity, peripheral status, and power and UPS telemetrySecure boot, firmware integrity, and patch delivery for deployed kiosks, in partnership with DevSecOps and software engineeringCORE RESPONSIBILITIES1. Kiosk & Kit Hardware Build (Hands-On)Build and repair the hardware. Turn a bill of materials into a finished, tested unit.Build kiosks and mobile kits from the bill of materials and the assembly drawingsWire and rewire parts: crimp ferrules, land wires on terminal blocks, and seat jumpersRemove and replace cameras, fingerprint scanners, ID scanners, card readers, USB hubs, monitors, power supplies, and batteriesRoute cable harnesses with proper strain relief so nothing pulls loose or rubsTest and qualify new parts for reliability, security, and costKeep spare parts current and swap known-good units to restore service fast2. Power & ElectricalOwn the power path from the wall to each device.Work with wall power input from 120 to 250 VAC and the internal 12 VDC and 24 VDC suppliesTrace voltage with a multimeter; check rails at the power supply and at each deviceFind and fix blown fuses, loose ferrules, bad barrel connectors, and dead railsService the UPS and backup battery; know the power-on and power-off steps and the UPS beep behaviorRead and follow voltage labels and safety warnings before touching live parts3. Network Engineering & ConnectivityKeep every unit connected and secure.Set up and manage the internal network: the cellular router, the VPN router and switch, the NetBooter, Wi-Fi for the mobile kit, and device IP addressingApply TCP/IP, DNS, DHCP, VLAN, and firewall rules; verify reach with ping and ipconfigSet up site-to-site VPN and cellular LTE or 5G failover for units without wired internetConfirm each device answers on its correct IP and gatewayWatch fleet network health, latency, and uptime, holding 99.5 percent or better4. Provisioning, Imaging & Fleet ManagementMake every unit identical and remotely manageable.Image, configure, test, and ship units through a repeatable pipeline with little manual workWork with Windows 10 and 11 and IoT LTSC: imaging, hardening, and updates at fleet scaleSet up remote management: firmware updates, reimaging, peripheral checks, and remote rebootConfirm certificates, licenses, and software module versions match the NextgenID specification5. Testing, QA & AcceptanceProve each unit works before it leaves.Run the Factory Acceptance Test steps and record pass or fail with evidenceRun the hardware test application to confirm every device is seen and worksBuild and maintain test fixtures and acceptance proceduresPerform burn-in and restart checks so units hold up over time6. Field Support & ReliabilityFix problems fast, in person or remotely.Triage a down unit: power faults, dead peripherals, and lost networkUse LED status, alarm state, and the CheckMate diagnostic tool to find the causeSupport field service engineers with remote diagnostics and clear escalation stepsPerform root-cause analysis and put in a permanent fix, not just a swapReduce field trips by resolving more issues remotely7. BOM, Documentation & LifecycleKeep the record clean and the supply steady.Own the hardware bill of materials, vendor list, and lead times with operations and supply chainWrite assembly steps, wiring diagrams, and acceptance criteria that others can followTrack inventory, warranty and RMA, spare parts, and end-of-life component planningRecord serial numbers for consigned and tracked parts8. Security & ComplianceBuild security into the hardware and the network.Support SOC 2 and FedRAMP requirements for physical security, hardware integrity, and network controlsHarden Windows endpoints with the DevSecOps team: secure boot, BitLocker, and application allow-listingFollow NIST 800-53 controls for hardware and networkKeep firmware trusted and patch delivery safe for deployed unitsWHAT YOU MUST HAVE ALREADY DONEBuilt, wired, or rebuilt physical hardware systems in production — kiosks, POS, IoT, edge, or industrial and embedded equipmentTraced a power fault to its cause with a multimeter and repaired it, rather than replacing the whole unitConfigured networks yourself — VLANs, VPN tunnels, firewall rules, and device addressing — not merely supported someone else’s configurationDeployed and sustained distributed equipment in the field, including diagnosing failures remotelyWorked to a documented build and acceptance standard, and written the documentation others followedQUALIFICATIONSRequired5 or more years in hardware engineering, network engineering, or a combined hardware and infrastructure role with hands-on production responsibilityHands-on electrical troubleshooting: 12 VDC and 24 VDC systems, multimeter voltage tracing, fuses, connectors, and power supply replacementHands-on experience building, integrating, or maintaining hardware systems such as kiosks, POS, IoT devices, edge computing, or industrial and embedded systemsStrong networking fundamentals: TCP/IP, DNS, DHCP, VLAN, VPN (IPSec or WireGuard), firewall configuration, and cellular LTE or 5G connectivityWorking knowledge of Windows 10 and 11 deployment and hardening in a fleet or device management contextExperience with hardware BOM management, vendor evaluation, and component lifecycle planningFamiliarity with at least one cloud platform (AWS, Azure, or GCP) for network connectivity and remote device managementAbility to read and create hardware schematics, wiring diagrams, and assembly documentationStartup mindset: rolls up sleeves and gets it done, even when the task falls outside the job descriptionMust be able to work onsite in Fairfax, VA; U.S. citizenPreferredExperience with biometric hardware: cameras, fingerprint sensors, NFC and RFID readers, document scanners, or identity verification peripheralsNetwork or security certifications: CCNA, CompTIA Network+, Security+, or equivalentAsset management and logistics experience: shipping and receiving, inventory control, and serialized asset trackingFamiliarity with FedRAMP or government compliance requirements related to hardware and network controls (NIST 800-53)Experience with SD-WAN, zero-trust network access, or SASE architecturesWiring-level troubleshooting or embedded systems experience (firmware, BIOS, UEFI)Prior experience scaling hardware deployments internationally: power standards, carrier and ISP coordination, customs and logisticsActive security clearance or clearance eligibilitySIGNALS WE LOOK FORYou can explain how you would design a kiosk network that stays connected and secure across 250 or more units in diverse locations with intermittent connectivityYou have debugged hardware failures in the field and can describe your systematic path to root cause and a permanent fixYou think in standardization and repeatability: every kiosk that leaves the facility is identical, documented, and remotely manageableYou balance cost and reliability, selecting components that meet security and performance needs without over-engineeringYou respect the power path: you read the labels, check the rails, and work safely around live partsWHAT SUCCESS LOOKS LIKEEvery kiosk ships with a documented, repeatable build process and passes standardized acceptance testing before deploymentNetwork connectivity is resilient: kiosks hold 99.5 percent or better uptime with automated failover and proactive alertingHardware issues are diagnosed and resolved remotely wherever possible, cutting field service dispatches by 40 percent or moreThe hardware platform scales smoothly to 400 or more units with an established BOM, vendor relationships, and provisioning automationHardware and network controls meet SOC 2 and FedRAMP evidence requirements with minimal manual documentation overhead","company":"Nextgenid","rawCompany":"nextgenid","city":"Baltimore","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-07-30T11:04:20.265Z","occupations":[{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1231.00","title":"Computer Network Support Specialists","slug":"computer-network-support-specialists"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541513","title":"Computer Facilities Management Services","slug":"computer-facilities-management-services"},{"code":"334118","title":"Computer Terminal and Other Computer Peripheral Equipment Manufacturing","slug":"computer-terminal-and-other-computer-peripheral-equipment-manufacturing"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Hardware Network Engineer","description":"THE ROLENextgenID is hiring a Hardware / Network Engineer to own our kiosk and mobile kit hardware from build to field support. We operate 250 or more self-service kiosks that verify identity for government and enterprise sites, scaling to 400 or more over the next 18 to 24 months. You build units, wire and rewire parts, swap devices, trace power, configure networks, and fix faults. You keep every unit identical, documented, and ready to ship.This is a hands-on job, not a design-only or advisory one. Reporting directly to the CTO & EVP, you work alongside software engineering, operations, field service, and client solutions so every unit ships reliable, connected, and secure. Our kiosks process identity verification transactions in government and enterprise environments, which makes uptime, security, and network resilience non-negotiable.ROLE FIT & NON-NEGOTIABLESOnsite in Fairfax, VA. Remote is not available.U.S. citizen required for ITAR and government customer obligations.Comfortable with physical hardware — assembly, wiring, cabling, and bench testing — as well as network configuration and troubleshooting.Hands-on ownership of kiosk hardware and network infrastructure, including the power path and the field faults that come with it.Comfortable working to a documented standard: every unit identical, tested, and traceable.WHAT YOU WILL OWN (90 TO 180 DAY OUTCOMES)A documented and standardized kiosk hardware bill of materials, assembly process, and QA acceptance criteria that produce consistent build qualityA repeatable hardware provisioning pipeline: image, configure, test, and ship units with minimal manual interventionAn audited and hardened kiosk network architecture: VPN tunnels, firewall rules, cellular LTE or 5G failover, and remote management access across the deployed fleetHardware lifecycle management: inventory tracking, warranty and RMA processes, component obsolescence planning, and a spare parts strategyMonitoring and alerting for hardware health: temperature, connectivity, peripheral status, and power and UPS telemetrySecure boot, firmware integrity, and patch delivery for deployed kiosks, in partnership with DevSecOps and software engineeringCORE RESPONSIBILITIES1. Kiosk & Kit Hardware Build (Hands-On)Build and repair the hardware. Turn a bill of materials into a finished, tested unit.Build kiosks and mobile kits from the bill of materials and the assembly drawingsWire and rewire parts: crimp ferrules, land wires on terminal blocks, and seat jumpersRemove and replace cameras, fingerprint scanners, ID scanners, card readers, USB hubs, monitors, power supplies, and batteriesRoute cable harnesses with proper strain relief so nothing pulls loose or rubsTest and qualify new parts for reliability, security, and costKeep spare parts current and swap known-good units to restore service fast2. Power & ElectricalOwn the power path from the wall to each device.Work with wall power input from 120 to 250 VAC and the internal 12 VDC and 24 VDC suppliesTrace voltage with a multimeter; check rails at the power supply and at each deviceFind and fix blown fuses, loose ferrules, bad barrel connectors, and dead railsService the UPS and backup battery; know the power-on and power-off steps and the UPS beep behaviorRead and follow voltage labels and safety warnings before touching live parts3. Network Engineering & ConnectivityKeep every unit connected and secure.Set up and manage the internal network: the cellular router, the VPN router and switch, the NetBooter, Wi-Fi for the mobile kit, and device IP addressingApply TCP/IP, DNS, DHCP, VLAN, and firewall rules; verify reach with ping and ipconfigSet up site-to-site VPN and cellular LTE or 5G failover for units without wired internetConfirm each device answers on its correct IP and gatewayWatch fleet network health, latency, and uptime, holding 99.5 percent or better4. Provisioning, Imaging & Fleet ManagementMake every unit identical and remotely manageable.Image, configure, test, and ship units through a repeatable pipeline with little manual workWork with Windows 10 and 11 and IoT LTSC: imaging, hardening, and updates at fleet scaleSet up remote management: firmware updates, reimaging, peripheral checks, and remote rebootConfirm certificates, licenses, and software module versions match the NextgenID specification5. Testing, QA & AcceptanceProve each unit works before it leaves.Run the Factory Acceptance Test steps and record pass or fail with evidenceRun the hardware test application to confirm every device is seen and worksBuild and maintain test fixtures and acceptance proceduresPerform burn-in and restart checks so units hold up over time6. Field Support & ReliabilityFix problems fast, in person or remotely.Triage a down unit: power faults, dead peripherals, and lost networkUse LED status, alarm state, and the CheckMate diagnostic tool to find the causeSupport field service engineers with remote diagnostics and clear escalation stepsPerform root-cause analysis and put in a permanent fix, not just a swapReduce field trips by resolving more issues remotely7. BOM, Documentation & LifecycleKeep the record clean and the supply steady.Own the hardware bill of materials, vendor list, and lead times with operations and supply chainWrite assembly steps, wiring diagrams, and acceptance criteria that others can followTrack inventory, warranty and RMA, spare parts, and end-of-life component planningRecord serial numbers for consigned and tracked parts8. Security & ComplianceBuild security into the hardware and the network.Support SOC 2 and FedRAMP requirements for physical security, hardware integrity, and network controlsHarden Windows endpoints with the DevSecOps team: secure boot, BitLocker, and application allow-listingFollow NIST 800-53 controls for hardware and networkKeep firmware trusted and patch delivery safe for deployed unitsWHAT YOU MUST HAVE ALREADY DONEBuilt, wired, or rebuilt physical hardware systems in production — kiosks, POS, IoT, edge, or industrial and embedded equipmentTraced a power fault to its cause with a multimeter and repaired it, rather than replacing the whole unitConfigured networks yourself — VLANs, VPN tunnels, firewall rules, and device addressing — not merely supported someone else’s configurationDeployed and sustained distributed equipment in the field, including diagnosing failures remotelyWorked to a documented build and acceptance standard, and written the documentation others followedQUALIFICATIONSRequired5 or more years in hardware engineering, network engineering, or a combined hardware and infrastructure role with hands-on production responsibilityHands-on electrical troubleshooting: 12 VDC and 24 VDC systems, multimeter voltage tracing, fuses, connectors, and power supply replacementHands-on experience building, integrating, or maintaining hardware systems such as kiosks, POS, IoT devices, edge computing, or industrial and embedded systemsStrong networking fundamentals: TCP/IP, DNS, DHCP, VLAN, VPN (IPSec or WireGuard), firewall configuration, and cellular LTE or 5G connectivityWorking knowledge of Windows 10 and 11 deployment and hardening in a fleet or device management contextExperience with hardware BOM management, vendor evaluation, and component lifecycle planningFamiliarity with at least one cloud platform (AWS, Azure, or GCP) for network connectivity and remote device managementAbility to read and create hardware schematics, wiring diagrams, and assembly documentationStartup mindset: rolls up sleeves and gets it done, even when the task falls outside the job descriptionMust be able to work onsite in Fairfax, VA; U.S. citizenPreferredExperience with biometric hardware: cameras, fingerprint sensors, NFC and RFID readers, document scanners, or identity verification peripheralsNetwork or security certifications: CCNA, CompTIA Network+, Security+, or equivalentAsset management and logistics experience: shipping and receiving, inventory control, and serialized asset trackingFamiliarity with FedRAMP or government compliance requirements related to hardware and network controls (NIST 800-53)Experience with SD-WAN, zero-trust network access, or SASE architecturesWiring-level troubleshooting or embedded systems experience (firmware, BIOS, UEFI)Prior experience scaling hardware deployments internationally: power standards, carrier and ISP coordination, customs and logisticsActive security clearance or clearance eligibilitySIGNALS WE LOOK FORYou can explain how you would design a kiosk network that stays connected and secure across 250 or more units in diverse locations with intermittent connectivityYou have debugged hardware failures in the field and can describe your systematic path to root cause and a permanent fixYou think in standardization and repeatability: every kiosk that leaves the facility is identical, documented, and remotely manageableYou balance cost and reliability, selecting components that meet security and performance needs without over-engineeringYou respect the power path: you read the labels, check the rails, and work safely around live partsWHAT SUCCESS LOOKS LIKEEvery kiosk ships with a documented, repeatable build process and passes standardized acceptance testing before deploymentNetwork connectivity is resilient: kiosks hold 99.5 percent or better uptime with automated failover and proactive alertingHardware issues are diagnosed and resolved remotely wherever possible, cutting field service dispatches by 40 percent or moreThe hardware platform scales smoothly to 400 or more units with an established BOM, vendor relationships, and provisioning automationHardware and network controls meet SOC 2 and FedRAMP evidence requirements with minimal manual documentation overhead","datePosted":"2026-07-30T11:04:20.265Z","dateModified":"2026-07-30T11:04:20.265Z","hiringOrganization":{"@type":"Organization","name":"Nextgenid","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Baltimore","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"8c58f4be43920ed42ddc9f0a"},"url":"https://jobsearcher.com/jobs/8c58f4be43920ed42ddc9f0a"}}