Senior Unified Communications Engineer – Federal IT Network Automation & SD‑WAN Specialist (TS/SCI Clearance)
About brighthush
brighthush is a leading innovator in secure, high‑performance networking solutions for federal agencies and critical infrastructure providers. With a mission to empower mission‑critical operations through cutting‑edge technology, brighthush delivers resilient, scalable, and secure network architectures that enable agencies to focus on their core missions while we handle the complexity of modern connectivity.
Why Join brighthush?
At brighthush, you’ll work at the intersection of advanced networking, automation, and security. Our team is composed of seasoned engineers, architects, and developers who thrive on solving complex problems in a fast‑paced, collaborative environment. We invest heavily in continuous learning, offering certifications, hands‑on labs, and access to the latest tools and technologies. If you’re passionate about building the next generation of secure, automated networks, brighthush is the place to bring your expertise to life.
Position Overview
As a Unified Communications Engineer on our federal customer team, you will be the linchpin that drives the performance, stability, and scalability of next‑generation networks supporting enterprise IT workloads. Your role will involve designing, deploying, and maintaining network infrastructure that meets the highest standards of security and reliability. You will collaborate closely with software and platform engineers, network architects, and external stakeholders to deliver robust, automated solutions that scale across geographically distributed sites.
Key Responsibilities
- Network Automation & Orchestration: Design, develop, and maintain automation scripts and frameworks (Python, Go, Ansible) to provision, configure, and manage network devices and services.
- Infrastructure Design & Deployment: Work with the Network Architect to translate design specifications into deployable configurations, ensuring rapid, error‑free rollouts of new network topologies and services.
- Operational Excellence: Monitor, troubleshoot, and optimize network performance, including routing, interconnectivity, and application‑level interactions on Linux systems and next‑gen networking tools.
- Security & Compliance: Implement secure transport mechanisms (IPsec, MACsec, firewall policies) and enforce compliance with internal standards and federal regulations.
- Innovation & Continuous Improvement: Drive the adoption of emerging technologies such as SONiC, Cumulus NOS, Kubernetes networking (CNI, MetalLB), and cloud‑native SD‑WAN solutions.
- Documentation & Knowledge Sharing: Produce clear, comprehensive technical documentation, runbooks, and best‑practice guides for internal teams and external partners.
- Stakeholder Collaboration: Engage with vendors, customers, and cross‑functional teams to gather requirements, provide status updates, and translate business needs into technical solutions.
- Physical & Safety Requirements: Perform on‑site duties, including lifting up to 25 lbs, to support hardware installation and maintenance.
Essential Qualifications
- Extensive experience designing, deploying, and troubleshooting large‑scale enterprise WAN architectures using core routing protocols (BGP, OSPF, EIGRP), MPLS, and overlay networks across geographically distributed sites.
- Hands‑on track record configuring and managing enterprise‑grade Software‑Defined WAN platforms (e.g., Cisco Catalyst SD‑WAN, Fortinet Secure SD‑WAN, VMware Velocloud, Silver Peak) with centralized policy enforcement, zero‑touch provisioning, and dynamic path selection.
- Proficiency in developing production automation scripts and configuration frameworks using Python and Ansible, with practical experience consuming network REST APIs, NETCONF/RESTCONF, and data serialization formats (JSON, YAML, XML).
- Strong background implementing secure transport connectivity across WAN boundaries, including IPsec site‑to‑site tunnels, MACsec, next‑gen firewall policies, and QoS traffic shaping for latency‑sensitive applications.
- Ability to lift up to 25 lbs and perform on‑site tasks as required.
Preferred Qualifications
- Experience using Terraform to declare network state alongside version‑controlled GitOps workflows (GitLab CI, GitHub Actions) for automated change validation, linting, and continuous deployment.
- Practical experience with model‑driven telemetry (gRPC, gNMI), YANG data modeling, and streaming observability pipelines (Prometheus, Grafana, ELK/OpenSearch, ThousandEyes) for proactive latency, jitter, and loss analytics.
- Experience integrating enterprise SD‑WAN topologies with major public clouds (AWS Transit Gateway/Direct Connect, Azure Virtual WAN/ExpressRoute) and Secure Access Service Edge (SASE) solutions (Zscaler, Palo Alto Prisma Access).
- Advanced networking and automation credentials such as Cisco Certified DevNet Professional / CCNP Enterprise (with Network Automation focus), CCIE, or equivalent automation‑centric certifications.
- Familiarity with Kubernetes networking concepts, including CNI plugins, pod networking, and MetalLB Operator for traffic load balancing on bare‑metal clusters.
Core Skills & Competencies
- Network Protocols & APIs: Deep understanding of BGP, OSPF, EIGRP, MPLS, Open vSwitch, and RESTful APIs for network devices.
- Programming & Scripting: Advanced proficiency in Python or Go, with experience writing maintainable, reusable automation code.
- Automation Frameworks: Expertise in Ansible, Terraform, and GitOps practices for infrastructure as code.
- Operating Systems: Comfortable working with Linux distributions, network operating systems (SONiC, Cumulus NOS), and container runtimes.
- Cloud Integration: Knowledge of AWS, Azure, and GCP networking services and how they interoperate with on‑prem SD‑WAN.
- Security & Compliance: Strong grasp of secure transport protocols, firewall policy design, and regulatory compliance requirements.
- Communication & Collaboration: Excellent verbal and written communication skills, with the ability to translate complex technical concepts to non‑technical stakeholders.
- Time Management: Proven ability to prioritize tasks, meet deadlines, and manage multiple concurrent projects in a high‑pressure environment.
Career Growth & Learning Opportunities
At brighthush, your career trajectory is defined by the impact you make. We offer a structured career ladder that rewards innovation, leadership, and technical excellence. You will have the chance to:
- Lead cross‑functional projects that shape the future of federal networking.
- Earn industry‑recognised certifications and attend global conferences.
- Mentor junior engineers and contribute to internal knowledge bases.
- Participate in research and development initiatives that push the boundaries of secure networking.
Work Environment & Culture
brighthush fosters a culture of inclusion, curiosity, and continuous improvement. Our team values diversity of thought and encourages every member to bring fresh ideas to the table. You’ll work in a collaborative, flat‑hierarchy environment where your voice matters, and your contributions directly influence the success of our federal partners.
Compensation & Perks
While specific figures vary based on experience and clearance level, brighthush offers a competitive salary package that includes:
- Base salary commensurate with industry standards for federal networking roles.
- Performance‑based bonuses tied to project milestones and innovation.
- Comprehensive health, dental, and vision insurance.
- 401(k) matching and retirement planning resources.
- Paid time off, holidays, and flexible work arrangements where feasible.
- Access to cutting‑edge tools, labs, and training resources.
- Employee wellness programs and team‑building events.
Ready to Make an Impact?
If you are a seasoned networking professional with a passion for automation, security, and innovation, brighthush invites you to bring your expertise to our federal customer team. This is your chance to shape the future of secure, high‑performance networks that support critical missions across the nation.
Apply now and join brighthush in building the next generation of resilient, automated networks.
``` Apply for this job