Lead Network Engineer

MITRE Lead Network EngineerWhy choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day—working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.Department SummaryThe L616 – Enterprise and Tactical Networking Department within MITRE Technology and Engineering specializes in complex network challenges vital to national well-being. Our work involves researching, developing, and applying advanced technologies in core areas such as:Network architecture and designSoftware-defined / Virtual networks (SDN/NFV)Network reliability, resilience, mission security and assurance, network data analyticsE2E network MS&A, T&E, AFSIMEmbedded networks (IoT, ICS, SCADA)Tactical and threat-informed networkingBy integrating deep technical expertise across these networking domains, we provide our federal sponsors with comprehensive solutions that enable their mission outcomes.Roles & ResponsibilitiesMITRE's Enterprise and Tactical Networking department is seeking talented network engineers to lead projects and project teams and leverage expertise in enterprise networking, network security, automation, and infrastructure architecture to address complex technical challenges for a wide range of sponsor organizations. Candidates will lead and contribute to:Network Design: Defining validated designs for networks with details required for implementationSoftware-Defined / Virtual Networks: Configuring, deploying, testing and validating the latest technologies in software-defined and virtualized networks as well as "traditional" networkingMission Security and Assurance: Conducting cybersecurity risk assessments of proposed and existing designs to evaluate security posture, identify threats and vulnerabilities, and recommend mitigation strategiesNetwork Data Analytics: Designing, implementing, and enhancing network monitoring and data collection capabilities to provide visibility into performance, availability and operational healthNetwork Modeling, Simulation and Analysis: Developing and applying network modeling, simulation, emulation, and test methodologies to validate design assumptions, analyze traffic patterns, assess resiliency, and predict performance and scalability outcomesTactical and Thread-Informed Networking: Leading the development of solutions for coupling non-traditional, external threat feeds into traditional network routing parameters (i.e., bandwidth, delay, throughput) to better influence communications paths in challenging network environmentsMITRE Lead Network Engineer leads a project and / or teams in the design, implementation, testing, validation, and modernization of secure, resilient, and scalable network environments spanning LAN/WAN, data center, and tactical operations use cases. The role requires leadership skills, strong collaboration, technical rigor, and the ability to translate sponsor and mission needs into practical engineering solutions.Basic QualificationsTypically requires a minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience.Ability to obtain a DoD Secret security clearance.Per the U.S. Government's eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.This position requires a minimum of 4 days a week on-site.The candidate will engage in hands-on, mission-driven work. Responsibilities span the full solution lifecycle - from design and prototyping through testing, implementation, and monitoring - across networking and digital service management solutions as well as sponsor engagement, communication, and managing outcomes and deliverables. The candidate is expected to have some experience in the following:Network Design: Defining designs that enable secure, scalable, resilient, and supportable solutions, including target-state designs, technology standards and compliance frameworks related to network design, operational processes, implementation artifactsSoftware-Defined / Virtual Networks: Some areas of software-defined and virtualized networks, as well as "traditional" networking protocols and concepts, such as the following: IPv4/IPv6, Interior gateway routing protocols (e.g., OSPF), SD-WAN, Docker Swarm / Kubernetes, Zero-trust and network segmentation, Identity managementMission Security and Assurance: Conducting and providing risk assessments, threat and vulnerability identification, mitigation strategy recommendationsNetwork Data Analytics: Applying advanced data analytics and machine learning models for anomaly detection, performance optimization, and root cause analysis. Monitoring, troubleshooting and managing networks using SNMP and / or Syslog, NetFlow/IPFIX, streaming telemetry, APIs and dashboardsNetwork Modeling, Simulation and Analysis: Supporting technical decision-making regarding design, scalability and predicted performance using network modeling, simulation / emulation, lab / virtualized environmentsTeam Leadership and Communities: Demonstrates the ability to lead technical teams or initiatives, including task decomposition, technical direction, and mentoring of other engineers.Technical Reporting and Communications: Clearly communicate technical findings, methodologies, and project outcomes through written reports, briefings, and demonstrations for sponsors and internal teams.Knowledge Sharing: Actively participate in internal MITRE technical exchange events focused on emerging trends in networking and service management.Preferred QualificationsMaster's degree in Computer Science, Electrical Engineering, Computer Engineering, Data Science related discipline, or equivalent combination of related education and work experience.Professional or expert level networking certification(s) such as a CCNP/CCIE or JNCIP/JNCIE.Excellent analytical and problem-solving skillsStrong communication, presentation, and writing skillsThe ability to build collaborative and mutually beneficial working relationships with people of different backgrounds.Knowledge of, or hands-on experience in:Network Automation and Embedded Technologies: Experience with non-traditional enterprise network architectures, such as ad-hoc, mobile deployed networks and large-scale sensor networks as well as protocols such as named data networking and publish / subscribe that facilitate efficient communications over potentially unreliable connection paths.Virtualization and Continuous Integration: Experience with DevOps paradigms supported by virtualization, containerization, cloud and serverless architecturesSoftware Development and Automation: Experience using languages like Go, C++, Python, and JavaScript. Strong proficiency in scripting and automation using tools and frameworks like Ansible, Terraform, PowerShell, and Bash. Experience with version control systems, particularly Git, for source code management, collaboration, and CI/CD workflow integration.Embedded Networks: Experience with Internet of Things (IoT), Industrial Control Systems (ICS), and / or Supervisory Control and Data Acquisition (SCADA) systems, including protocols and regulatory compliance frameworks such as: Modbus, DNP3, OPC, BACnet, NERC CIP, IEC 62443, NIST SP 800-82Tactical and Thread-Informed Networking: Experience integrating distributed and centralized network control algorithms and / or integrating external inputs to "traditional" network path decision logic to facilitate non-standard (i.e., not "shortest path first") routing.Network Modeling, Simulation and Analysis: Experience with network modeling, simulation, emulation, and test methodologies to validate design assumptions and predict performance.This requisition requires the candidate to have a minimum of the following clearance(s): NoneThis requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s): SecretSalary compensation range and midpoint: $147,200 - $184,000 - $220,800 AnnualWork Location Type: OnsiteIt is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal