Eliassen Group is hiring: AAA Network Engineer in Englewood
Eliassen Group, Englewood, CO, United States
Onsite in Englewood, CO
Our client seeks a core wireless and network engineer to deliver carrier‑grade AAA for Wi‑Fi offload and roaming. The role focuses on RADIUS policy design, SIM‑based EAP methods, secure transport, and high‑throughput session data stores. You will configure Passpoint/OpenRoaming integrations and build reliable authentication and accounting flows aligned to WBA standards. You will collaborate with data teams to optimize databases for low‑latency, high‑TPS performance.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $60.00 to $70.00/hr. w2
Responsibilities
Design and implement AAA policies and schemas for Wi‑Fi offload in carrier‑grade environments.
Deploy and operate AAA servers including Nokia AAA and FreeRADIUS.
Engineer and optimize RADIUS authentication, authorization, and accounting workflows.
Implement EAP‑SIM and EAP‑AKA methods for SIM‑based authentication.
Secure transport using IPsec, TLS/RADSEC, and robust certificate management.
Configure Passpoint/Hotspot 2.0 and integrate with OpenRoaming aligned to WBA standards.
Design and manage SQL/NoSQL data stores for subscriber profiles, sessions, and accounting logs.
Architect high‑TPS, low‑latency session management for real‑time traffic switching.
Integrate DHCP, DNS, and IPAM solutions for dynamic Wi‑Fi environments.
Engineer tunneling solutions such as EoGRE and IPsec for secure backhaul to the core.
Simulate UE and validate EAP‑SIM/EAP‑AKA flows using tools such as Spirent, Ixia, or Calnex.
Monitor, troubleshoot, and tune performance across AAA, databases, and network paths.
Experience Requirements
Hands‑on experience developing AAA policies and managing AAA databases for Wi‑Fi offload in carrier‑grade settings.
Operational experience with Nokia AAA and FreeRADIUS.
Deep knowledge of RADIUS protocol and accounting workflows.
Proficiency with EAP‑SIM (RFC 4186) and EAP‑AKA (RFC 4187).
Experience implementing IPsec, TLS/RADSEC, and certificate management.
Configuration experience with Hotspot 2.0/Passpoint and familiarity with OpenRoaming and WBA standards.
SQL and NoSQL experience managing subscriber profiles, sessions, and accounting logs, including high availability topologies such as MySQL master/slave.
Designing low‑latency, high‑TPS authentication data paths and session stores.
Knowledge of DHCP, DNS, and IPAM solutions for large‑scale Wi‑Fi networks.
Experience with EoGRE and IPsec tunneling for access to core traffic transport.
Use of network simulation and test tools such as Spirent, Ixia, or Calnex to validate EAP flows.
#J-18808-Ljbffr
Our client seeks a core wireless and network engineer to deliver carrier‑grade AAA for Wi‑Fi offload and roaming. The role focuses on RADIUS policy design, SIM‑based EAP methods, secure transport, and high‑throughput session data stores. You will configure Passpoint/OpenRoaming integrations and build reliable authentication and accounting flows aligned to WBA standards. You will collaborate with data teams to optimize databases for low‑latency, high‑TPS performance.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $60.00 to $70.00/hr. w2
Responsibilities
Design and implement AAA policies and schemas for Wi‑Fi offload in carrier‑grade environments.
Deploy and operate AAA servers including Nokia AAA and FreeRADIUS.
Engineer and optimize RADIUS authentication, authorization, and accounting workflows.
Implement EAP‑SIM and EAP‑AKA methods for SIM‑based authentication.
Secure transport using IPsec, TLS/RADSEC, and robust certificate management.
Configure Passpoint/Hotspot 2.0 and integrate with OpenRoaming aligned to WBA standards.
Design and manage SQL/NoSQL data stores for subscriber profiles, sessions, and accounting logs.
Architect high‑TPS, low‑latency session management for real‑time traffic switching.
Integrate DHCP, DNS, and IPAM solutions for dynamic Wi‑Fi environments.
Engineer tunneling solutions such as EoGRE and IPsec for secure backhaul to the core.
Simulate UE and validate EAP‑SIM/EAP‑AKA flows using tools such as Spirent, Ixia, or Calnex.
Monitor, troubleshoot, and tune performance across AAA, databases, and network paths.
Experience Requirements
Hands‑on experience developing AAA policies and managing AAA databases for Wi‑Fi offload in carrier‑grade settings.
Operational experience with Nokia AAA and FreeRADIUS.
Deep knowledge of RADIUS protocol and accounting workflows.
Proficiency with EAP‑SIM (RFC 4186) and EAP‑AKA (RFC 4187).
Experience implementing IPsec, TLS/RADSEC, and certificate management.
Configuration experience with Hotspot 2.0/Passpoint and familiarity with OpenRoaming and WBA standards.
SQL and NoSQL experience managing subscriber profiles, sessions, and accounting logs, including high availability topologies such as MySQL master/slave.
Designing low‑latency, high‑TPS authentication data paths and session stores.
Knowledge of DHCP, DNS, and IPAM solutions for large‑scale Wi‑Fi networks.
Experience with EoGRE and IPsec tunneling for access to core traffic transport.
Use of network simulation and test tools such as Spirent, Ixia, or Calnex to validate EAP flows.
#J-18808-Ljbffr