Senior Network Engineer
$180,000–$240,000 year
On-siteFort Meade, Maryland, United States
Job Summary
Design, build, and troubleshoot network and network security architecture for mission-critical projects supporting the Department of Defense. Operate and troubleshoot autonomously to address complex performance, security, and technical issues, including LAN/WAN operations, network automation, and security appliances. Analyze hardware requirements, prepare specifications, and coordinate with Information Assurance Engineers to validate designs against security controls and DISA STIG requirements. Create and update technical documentation, provide implementation templates for deployment phases, and deploy endpoint security appliances. Work in a SCIF environment with a Top Secret clearance, requiring 10 years of network engineering experience and a Bachelor's degree.
Required Qualifications
- Cisco Certified Network Professional (CCNP) certification
- Active Top Secret clearance with SCI eligibility
- Bachelor's Degree in an IT related field, or an additional five (5) years of Network Engineering experience
- 10 (ten) years of network engineering w/ 3 years of network design architecture and implementation
- DoD 8570.01-M IAT-II baseline certification requirements
- Experience designing, configuring, troubleshooting and testing: IS-IS and/or OSPF networks
- MP-BGP underlays and overlays
- MPLS networks: RSVP-TE, LDP, and SR-MPLS
- Complex routing policies and protocol redistribution concepts and strategies
- DMVPN and/or SD-WAN
- Cisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management software
- Experience deploying and testing: Cisco Identity Services Engine (ISE)
- New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrier
- Network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
- Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint
- Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions
- Ability to travel up to 20%
- Must be able to lift 50 lbs
Desired Qualifications
- Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance
- Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI
- Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances
- Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch
- Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL
- Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systems
- Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
- Experience developing IT checklists, SOPs, guides, etc.
- Experience deploying DISA STIGs and conducting Government network assessments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.