Network Engineer

Network Engineer

S2Technologies is seeking a skilled Network Engineer to support the West Desert Test Center (WDTC) Data Sciences Division in meeting its mission of providing developmental and production testing of defense programs.

Job Responsibilities:

• Oversee network administration and network management operations for DPG.
• Log all requests for assistance and all deficiencies upon discovery, and track solutions, in the Government approved trouble ticketing system.
• Monitor system traffic and rate of data flows, manage and plan system capacity. As potential system performance improvements become evident, identify and recommend implementation to the Chief Information Officer (CIO).
• Provide monitoring, operations, maintenance, troubleshooting and repair of routers, switches, Advanced Security Appliance (ASA) and Wide Area Network (WAN) Optimizers.
• Monitor and evaluate systems to include policies and procedures to protect clients, networks, data systems and databases from unauthorized activity. Make recommendations for improvements to the CIO.
• Employ hardware and software tools to install, monitor and direct information protection and defensive measures and provide network security.
• Manage implementation and project installation and ensure architecture, configuration and integration conformity. Supported devices include: Cisco routers, Cisco Switches, Cisco ASAs, Cisco Access Points, Forescout Network Access control, and the McAfee Intrusion prevention system.
• Coordinate with Network Enterprise Center (NEC) on cable and fiber plant.
• Install, configure, monitor, administer and maintain wired/wireless network equipment, and network management systems. This will include IT support of WDTC field tests.
• Troubleshoot problems with network nodes to include computers, servers, printers, digital senders, hubs, switches and routers utilizing network analyzers and troubleshooting software.
• Install, configure, monitor and administer intrusion detection devices within the Enterprise, and Dynamic Host Configuration Protocol (DHCP) and managed Internet Protocol (IP) addresses, to include all Hardware/Software (HW/SW). Immediately report any suspected intrusions or violations to the Information Systems Security Manager (ISSM) and the CIO.
• On a monthly basis inspect the router/switch audit logs for suspected intrusions or violations. If suspected intrusions or violations occurred, prepare a summary report and submit to the ISSM and CIO by the 4th duty day of the following month. Contractor format for the report is acceptable. This information will also be included in the monthly status report submitted to the COR.
• Create, configure and maintain tunnels and certifications for all personnel needing access for Virtual Private Network (VPN).There are approximately 125 - 150 VPN users.
• Configure and maintain routers and Access Control Lists (ACL) ensuring appropriate network access to authorized users and processes.
• Operate and maintain DPG Defense Research and Engineering Network/Secure Defense Research and Engineering Network (DREN/SDREN) boundary devices to include existing and new firewall appliances, proxy appliances, and interfaces to routers/switches connecting the firewall appliances to the internal and external network operations centers.
• Create, modify to keep current, and manage network documentation, including configurations and backup procedures.
• Perform monthly audits of system configurations and communicate potential security issues and incidents to the ISSM and CIO within 1 duty day of discovery.
• Configure and maintain system installation records, files and indexes.
• Configure and maintain monitoring, operations and maintenance of all base web proxy and caching servers.
• Upon the discovery of any malicious traffic and any unplanned or malicious changes to the network, implement authorized controls to identify and prevent any unauthorized activity, and return the network to a secure and authorized state. Notify the ISSM and CIO of the circumstances as soon as possible.
• Install, configure, monitor, troubleshoot and maintain authorized web based management tools.
• Participate in the planning and implementation of new network installations.
• Coordinate all new equipment installation with the ISSM and COR.
• Install, maintain, and configure encryption devices, including re-keying with Government personnel. The Government anticipates three TACLANEs.

Experience:

• 2 years of relevant IT, Network, Infrastructure experience
• Experienced with Simple Network Management Protocol (SNMP), CISCO equipment, and Network Access Control (NAC)

Education:

• n/a

Certifications:

• Any 1 or more IAT Level II or III Certification (CCNA-Security, CySA+, CND, Security+ CE, CASP CE, CCNP, CISA, CISSP (or Associate))
• Any 1 or more of the following computing environment certifications:
  • CCNA
  • CCNP
  • CCIE
  • CCAr
  • MCPS
  • MCAS
  • FSCA
  • FSAA
  • FSCE
  • Network+

Security Clearance:

• Active Secret

Other Position Requirements:

S2Technologies is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.