What are the responsibilities and job description for the AAA Network Engineer position at Eliassen Group?
Description
Onsite in Englewood, CO
Our client seeks a core wireless and network engineer to deliver carrier-grade AAA for Wi‑Fi offload and roaming. The role focuses on RADIUS policy design, SIM-based EAP methods, secure transport, and high-throughput session data stores. You will configure Passpoint/OpenRoaming integrations and build reliable authentication and accounting flows aligned to WBA standards. You will collaborate with data teams to optimize databases for low-latency, high-TPS performance.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $60.00 to $70.00/hr. w2
Responsibilities
Onsite in Englewood, CO
Our client seeks a core wireless and network engineer to deliver carrier-grade AAA for Wi‑Fi offload and roaming. The role focuses on RADIUS policy design, SIM-based EAP methods, secure transport, and high-throughput session data stores. You will configure Passpoint/OpenRoaming integrations and build reliable authentication and accounting flows aligned to WBA standards. You will collaborate with data teams to optimize databases for low-latency, high-TPS performance.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $60.00 to $70.00/hr. w2
Responsibilities
- Design and implement AAA policies and schemas for Wi‑Fi offload in carrier-grade environments.
- Deploy and operate AAA servers including Nokia AAA and FreeRADIUS.
- Engineer and optimize RADIUS authentication, authorization, and accounting workflows.
- Implement EAP‑SIM and EAP‑AKA methods for SIM-based authentication.
- Secure transport using IPsec, TLS/RADSEC, and robust certificate management.
- Configure Passpoint/Hotspot 2.0 and integrate with OpenRoaming aligned to WBA standards.
- Design and manage SQL/NoSQL data stores for subscriber profiles, sessions, and accounting logs.
- Architect high‑TPS, low‑latency session management for real‑time traffic switching.
- Integrate DHCP, DNS, and IPAM solutions for dynamic Wi‑Fi environments.
- Engineer tunneling solutions such as EoGRE and IPsec for secure backhaul to the core.
- Simulate UE and validate EAP‑SIM/EAP‑AKA flows using tools such as Spirent, Ixia, or Calnex.
- Monitor, troubleshoot, and tune performance across AAA, databases, and network paths.
- Hands-on experience developing AAA policies and managing AAA databases for Wi‑Fi offload in carrier-grade settings.
- Operational experience with Nokia AAA and FreeRADIUS.
- Deep knowledge of RADIUS protocol and accounting workflows.
- Proficiency with EAP‑SIM (RFC 4186) and EAP‑AKA (RFC 4187).
- Experience implementing IPsec, TLS/RADSEC, and certificate management.
- Configuration experience with Hotspot 2.0/Passpoint and familiarity with OpenRoaming and WBA standards.
- SQL and NoSQL experience managing subscriber profiles, sessions, and accounting logs, including high availability topologies such as MySQL master/slave.
- Designing low-latency, high-TPS authentication data paths and session stores.
- Knowledge of DHCP, DNS, and IPAM solutions for large-scale Wi‑Fi networks.
- Experience with EoGRE and IPsec tunneling for access to core traffic transport.
- Use of network simulation and test tools such as Spirent, Ixia, or Calnex to validate EAP flows.
Salary : $60 - $70