Network Engineer - TS​/SCI w​/Poly

Overview

• Req
• Type of Requisition:
  Regular
• Clearance Level Must Be Able to Obtain:
  Top Secret SCI + Polygraph
• Public Trust/Other
  
  Required:
  
  None
• Job Family: IT Infrastructure and Operations
• Skills:
  
  Cisco ASA Firewall, Local Area Network (LAN), Networks, Technical Support
• Experience:
  
  15+ years of related experience
• US Citizenship
  
  Required:
  
  Yes

The Network Engineer (SME) is responsible for designing technical solutions for complex problems. The candidate will provide technical oversight of a project solution, including requirement interpretation and allocation of requirements to technical components. The candidate will define processes to support the implementation of requirements. The candidate will be responsible for ensuring that the technical solutions leverage industry best practices, designing security and excellence while minimizing the total cost of ownership.

Candidate should be able to define internal and external customer IT infrastructure architecture needs and then design solutions to meet those needs to include: capacity planning, systems configuration and tuning, monitoring backups, and installations of hardware and software. Candidates will be required to work independently with little supervision and should be flexible to work and support IT Operations needs as requested.

• Define, maintain, and upgrade the overall security posture of the networks
• Perform security audits of events and overall health and implement changes to improve the security posture
• Manage and allocate network installation and engineering tasks; configure and maintain communications systems; familiarity with implementation of LAN and WAN equipment including firewalls, servers, workstations, routers, switches, hubs, storage devices, A/V equipment and equipment racks
• Ability to write and edit “build-to” and “as-built” documentation, as well as implementation and test plans for physical and logical installs of IT equipment
• Able to engage in technical system planning beyond the network, to include applications and systems that utilize the network being delivered
• Provide expert level analysis of voice, video, and/or data communications networks, including planning, designing, evaluating, selecting, and upgrading operating systems and protocol suites
• Able to plan network layouts and configure systems to user environments
• May provide technical support and troubleshooting to users (Tier I, II, III)
• May serve as a technical team and/or task leader; must be independent and self-motivated

Required Qualifications:

• Experience allowing voice, video traffic across port-based firewall and NGFW
• Expertise/experience (more than 10) deploying Cisco, Palo Alto, or Juniper firewall Manager servers
• Experience in engineering and deploying multi firewall solutions
• Experience design, engineering, and deploying controlled interfaces (10+ years)
• Experience design, engineering, and deploying firewall vendor transitioning plans
• Experience design, engineering, and deploying firewall in a multicast network environment
• Experience IPSec site-to-site VPN utilizing PKI (CA)
• Experiences Remote access VPN
• 12+ years of experience configuring/maintaining Cisco ASA/Next Generation Firewall
• 10+ years of experience configuring, designing, maintaining, and troubleshooting LAN/WAN devices. Thorough understanding of network routing concepts (EIGRP, OSPF, BGP, IP MPLS)
• Basic understanding of QoS concepts
• Experience with network monitoring technologies
• Ability to take ambiguous requirements or problems and convert them into technical solutions
• Ability to partner with systems administrators, storage administrators, and application developers to solve complex problems
• Complex problem management research and issue resolution
• Ability to mentor junior network engineers

Desired

Qualifications:

• Experience configuring, designing, and troubleshooting QoS in LAN or WAN devices
• Juniper, Palo Alto, or Cisco Next Generation Firewalls Certifications and hands-on experience
• Experience design, engineering, and deploying Multi-Factor Authentication solution
• Experience design, engineering, and deploying Zero-Trust solutions