Sr. Network Engineer

We are seeking a Senior Network Engineer to join our team of passionate individuals in Ft. Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.

In support of DISA, the Intel and Cyber Division is expanding a proven team of highly skilled engineers and architects to support a program that provides critical IT capabilities to the Department of Defense. This team is committed to engineering, assembling, integrating, deploying, and sustaining an innovative IT enterprise solution.

Essential Responsibilities:

The duties and responsibilities of the Senior Network Engineer include, but are not limited to, the following:

• Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.?

• Design, build and troubleshoot network and network security architecture.?

• Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.

• Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.

• Coordinate with the Information Assurance Security Engineers to create and validate all current and future designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.

• Create, review, and update technical documentation in support of integration projects.

• Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.

• Identify and diagnose complex performance, security, and technical issues.

Work Environment, Physical Demands, and Mental Demands:

• Employee will work in a SCIF on a daily basis.

• Employee may also work in a datacenter environment for specified periods of time.

Minimum Requirements (Knowledge, Skills, and Abilities):

• Cisco Certified Network Professional (CCNP) certification

• Experience designing, configuring, troubleshooting and testing:

• IS-IS and/or OSPF networks

• MP-BGP underlays and overlays

• MPLS networks: RSVP-TE, LDP, and SR-MPLS

• Complex routing policies and protocol redistribution concepts and strategies

• DMVPN and/or SD-WAN

• Cisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management software

• Experience deploying and testing:

• Cisco Identity Services Engine (ISE)

• New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrier

• Network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security

• Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.

• Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions.

Security Clearance Required:

• Must have active Top Secret clearance with SCI eligibility

Minimum Education:

• Bachelor’s Degree in an IT related field, or an additional five (5) years of Network Engineering experience

Minimum Years of Experience:

• 10 (ten) years of network engineering w/ 3 years of network design architecture and implementation

Required Certifications:

• Cisco Certified Network Professional (CCNP) certification

• DoD 8570.01-M IAT-II baseline certification requirements

Preferred Qualifications:

• AI if applicable to your program

• Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.

• Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.

• Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.

• Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.

• Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.

• Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systems

• Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142

• Experience developing IT checklists, SOPs, guides, etc.

• Experience deploying DISA STIGs and conducting Government network assessments.