Intermediate Network Engineer with Secret Clearance

Overview

• The design and modeling of network devices or functions to support a networked application or service.
• The implementation and configurations of hardware or software devices and network functions to support new services and applications.
• The sustainment of services, applications, network devices, network functions and hardware or software.
• The creation and maintenance of documentation and diagrams to ensure network system and service hygiene.
• Responsible for all lifecycle components' compliance with security controls, including, but not strictly limited to, providing confidentiality, integrity and availability as well as government compliance with Security Technical Implementation Guidelines (STIG), Zero Trust and Defense in depth.
• Use Government owned data to perform and provide change request audits, develop metrics, and trend analysis to understand change implementation management workload, effectiveness, efficiency, and service target performance.
• Maintain the current dashboard and implement necessary changes to report up to date metrics and analyses.
• Build, implement and document network enabled applications taking into consideration various factors such as but not limited to infrastructure requirements or limitations, security, and application performance needs and best practices.
• Support approximately 4000 devices with a projection of 5% annual increase and additional enclave support inbound.

• Must have 6+ years of experience in the implementation and sustainment of complex Datacenter and Enterprise Network infrastructure in a multi-vendor environment.
• Must have an Associates's degree in a related field or have and maintain a Vendor Network Certification (Associate or Higher)
• Strong knowledge of datacenter\u2010based network methods, proto\u2010 cols and technologies such as:
  • Routing [Border Gateway Protocol (BGP)/Open Shortest Path First (OSPF)/Multi\u2010Protocol(MP)\u2010BGP/Multiprotocol Label Switching (MPLS)/Virtual Private Network (VPN)/Multicast/Policy Based Routing (PBR)]
  • Switching [Rapid Spanning Tree Protocol (RSTP), Virtual Local Area Network (VLAN), Virtual Extensible LAN (VXLAN), Link Layer Discovery Protocol (LLDP), Virtual Private Cloud (VPC), Link Aggregation Control Panel (LACP), Link Aggregation (LAG)]
  • Transmission Control Protocol/Internet Protocol (TCP/IP) [Internet Protocol version 4 (IPv4), Internet Protocol version 6 (IPv6), User Datagram Protocol (UDP), Layer 1 through Layer 7 (L1\u2010L7), Internet Protocol Security (IPSEC), High Assurance Internet Protocol Encryptor (HAIPE)]
  • Firewalls [VPN, Access Control Lists (ACLs),Whitelisting]
  • Software Defined Networking (SDN)/Network Functions Virtualization (NFV)/Infrastructure as Code (IaC) [Cisco Application Centric Infrastructure (ACI), Service Insertion, Ansible]
  • Load balancing [Access Policy Manager (APM), Application Security Module (ASM), Local Traffic Manager (LTM), Global Traffic Manager (GTM)]
  • Identity and Access Management with Role Based Access Control (RBAC) [Authentication, Authorization, and Accounting (AAA)/RA\u2010 DIUS/TACACS/Lightweight Directory Access Protocol (LDAP)]
  • Network management and analysis (Performance Manager (PM), Juniper Space, Cisco Identify Services Engine (ISE), Splunk]
  • Structured cabling and installation standards
  • Application of network security and design practices
  • Cloud management [Amazon Web Services (AWS)/AZURE]

• Health, dental, vision, and life insurance
• Short term and long term disability insurance
• 401(k) with generous company match
• Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA)
• 15 days of personal leave plus paid federal holidays
• Professional development and training assistance