Input Technology Solutions is seeking a Network Engineer for a great opportunity at Fort Meade, MD!
Responsibilities:
The duties and responsibilities of the Senior Network Engineer include, but are not limited to:
- Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.
- Design, build and troubleshoot network and network security architecture.
- Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
- Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.
- Coordinate with the Information Assurance Security Engineers to create and validate all current and future designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.
- Create, review, and update technical documentation in support of integration projects.
- Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
- Identify and diagnose complex performance, security, and technical issues.
Requirements:
- Cisco Certified Network Professional (CCNP) certification
- Experience designing, configuring, troubleshooting and testing:
- IS-IS and/or OSPF networks
- MP-BGP underlays and overlays
- MPLS networks: RSVP-TE, LDP, and SR-MPLS
- Complex routing policies and protocol redistribution concepts and strategies
- DMVPN and/or SD-WAN
- Cisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management software
- Experience deploying and testing:
- Cisco Identity Services Engine (ISE)
- New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrier
- Network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
- Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.
- Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions.
- Ability to travel up to 20%.
Clearance Required:
- Must have active Top Secret clearance with SCI eligibility
Minimum Education:
- Bachelorโs Degree in an IT related field, or an additional five (5) years of Network Engineering experience.
Minimum Years of Experience:
- 10 Years of network engineering w/ 3 years of network design architecture and implementation
- Required Certifications:
- Cisco Certified Network Professional (CCNP) certification
- Must meet DoD 8570.01-M IAT-II or IAM-I baseline certification requirements
Preferred:
- Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.
- Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.
- Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.
- Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.
- Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.
- Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systems
- Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
- Experience developing IT checklists, SOPs, guides, etc.
- Experience deploying DISA STIGs and conducting Government network assessments.