Principal Network Engineer--Wireless

Location: Fort Meade, MD

Schedule: (FT/PT): Full Time

Travel Required:

Shift:

Potential for Telework: Yes, Hybrid

Required: Secret Security Clearance and U.S. Citizenship

Job Description

Our customer, Defense Information Systems Agency (DISA), requires personnel to support the Defense Enclave Services (DES) contract. The DES team is responsible for developing and deploying operational capabilities into an integrated and modernized enterprise environment. Become a member of the team supporting an extensive modernization program critical to DISA and Fourth Estate Agencies. Fourth Estate entities include organizations within the DoD that are not in the military departments, IC agencies, or combatant commands. The DES contract unifies the DOD Fourth Estate Defense Agencies and Field Activities (DAFA) common-use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office.

Our client is seeking a Principal Network Engineer--Wireless to lead engineering, deployment, and modernization of a large-scale, geographically distributed enterprise wireless network supporting a Department of Defense environment. The engineer will provide technical leadership for Aruba wireless architecture, RF performance, secure network access, integration, troubleshooting, and transition to operations.

The environment includes Aruba AOS 10, Aruba Central On-Premises, distributed Aruba ClearPass, Cisco ISE coexistence, certificate-based 802.1X authentication, Comply-to-Connect enforcement, wireless intrusion detection and prevention, and enterprise monitoring. The engineer will collaborate with network, identity, cybersecurity, and operations teams to deliver secure, reliable wireless services at scale.

Primary Responsibilities

Wireless Architecture and Controller Migration

• Design, deploy, configure, and optimize enterprise Aruba wireless infrastructure, including access points, gateways, management platforms, redundancy, and lifecycle upgrades.
• Engineer and sustain Aruba Central On-Premises and AOS 10 configurations, provisioning workflows, high availability, and enterprise configuration standards.
• Lead RF design, site surveys, channel and power planning, capacity analysis, roaming optimization, and wireless QoS for voice and mission-critical applications.

Network Access Control and Security

• Integrate Aruba ClearPass and Cisco ISE with 802.1X/EAP-TLS, RADIUS, certificate-based authentication, endpoint profiling, and Comply-to-Connect policies.
• Engineer wireless security controls, including network segmentation, WPA3, WIDS/WIPS, secure guest access, and approved cryptographic configurations.
• Coordinate with cybersecurity teams on applicable DoD security controls, STIGs, vulnerability remediation, testing, and accreditation evidence.

Integration, Troubleshooting, and Leadership

• Integrate wireless services with wired switching, VLANs, routing, DNS/DHCP, firewalls, identity systems, and enterprise monitoring platforms.
• Lead complex troubleshooting and root cause analysis involving RF, client connectivity, roaming, authentication, certificates, and network performance.
• Provide technical direction and mentoring to engineering teams; review designs and implementation plans and communicate technical risks and recommendations to program and government stakeholders.
• Plan and execute engineering changes, upgrades, testing, deployment waves, and operational handoffs with validation and rollback procedures.

Documentation Responsibilities

• Develop and maintain wireless architecture and RF designs, configuration baselines, access-control and security designs, implementation and test plans, site-survey results, troubleshooting guides, standard operating procedures, and as-built/transition documentation.

Clearance Requirements

• Active DoD Secret clearance; ability to obtain additional access if required by the assigned environment.
• Must meet applicable DoD cybersecurity workforce qualification requirements for the assigned position.

Key Success Factors

The successful engineer combines hands-on Aruba and RF expertise with the ability to lead complex deployments, isolate problems across wireless, wired, and identity layers, and deliver a secure, reliable service that operations teams can sustain.

Basic Qualifications

• Bachelor’s degree with 12+ years of relevant experience, or Master’s degree with 10+ years. Additional relevant experience may be considered in lieu of a degree.

• IAT Level II Certified - Must be Compliant

• Significant hands-on experience designing, deploying, and troubleshooting enterprise wireless networks across multiple sites.

• Strong experience with Aruba wireless platforms and management, including access points, gateways/controllers, and Aruba Central or comparable enterprise management tools.

• Strong knowledge of 802.11 and RF engineering, including coverage, interference, capacity, roaming, and wireless performance troubleshooting.

• Experience with enterprise wireless authentication and access control, including 802.1X, RADIUS, certificates, and Aruba ClearPass or comparable NAC platforms.

• Working knowledge of wired network dependencies, including TCP/IP, VLANs, routing, switching, firewalls, and network segmentation.

• Experience leading technical implementation activities, troubleshooting complex issues, and producing engineering and operational documentation.

• Strong written and verbal communication skills and ability to coordinate across technical teams and customer stakeholders.

Preferred Qualifications

• Aruba professional or expert certifications; relevant Cisco or security certifications.

• Experience with AOS 10 and clustered Aruba Central On-Premises deployments at large enterprise scale.

• Experience with distributed ClearPass clusters, FIPS configurations, Cisco ISE coexistence, and phased Comply-to-Connect rollout.

• Experience with Wi-Fi 6/6E/7, high-density RF surveys, voice roaming optimization, and tools such as Ekahau or AirMagnet.

• Experience with WIDS/WIPS, guest wireless separation, WPA3, and DoD STIG/RMF processes.

• Experience with REST APIs, SNMPv3, enterprise monitoring, Python/Ansible automation, or wireless telemetry integration.

• Experience supporting large-scale DoD or classified network environments.

Additional Qualifications

• Certification in one or more of the following: IAT Level II - CASP+ CE, IAT Level II - CCNA-Security, IAT Level II - CCNP Security, IAT Level II - CCSP, IAT Level II - CISA, IAT Level II - CISSP (or Associate), IAT Level II - CND, IAT Level II - CySA+, IAT Level II - GCED, IAT Level II - GCIH, IAT Level II - GICSP, IAT Level II - GSEC, IAT Level II - Security+ CE, IAT Level II – SSCP

PW Communications is a woman-owned, military-friendly firm that specializes in DoD contract support and proposal/document preparation for Federal contractors. For over 20 years, we have served as the premiere source in providing solutions to complex problems that face our clients daily. PW Communications’ staff is renowned as leaders in consultancy, and that is exactly why our clients trust us as THE source in handling mission essential needs.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.