Network Engineer – Senior

Role: Network Engineer – Senior

Location: Quantico, VA

Foundational Qualifications: Candidate must possess at least one of the following –

• Education: Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or SW Engineering; OR
• Training: One of the following approved DoD training courses M02D2M2 Cyber Networks Operations Engineer (Cyber NETOPS Eng); M0923W1 Data Systems Chief; M0923X1 Network Chief Course; M09BNU1 Cyber System Chief; M09CHN1 Communications Chief; M09D3H1 Cybersecurity Managers; M09DRX1 MAGTF Communications Planner; N23CUK1 Signals Intelligence Officers; N46CUK2 Signals Intelligence Officers; OR
• Certifications: One of the following active certifications – CCSP; CCNA; CCNP Security; SecurityX (CASP+); GCED; GCIA; GCLD; GDSA; GFACT

Years of Experience: 7+ years; experience may be considered an alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The Network Engineer – Senior plans, implements, & operates network services/systems, to include HW & virtual environments. This includes, but is not limited to:

• Core Tasks:
  • Configure & optimize network hubs, routers, & switches (e.g., higher-level protocols, tunneling).
  • Develop & implement network backup & recovery procedures.
  • Diagnose network connectivity problem.
  • Install & maintain network infrastructure device OS SW (e.g., IOS, firmware).
  • Install or replace network hubs, routers, & switches.
  • Monitor network capacity & performance.
  • Patch network vulnerabilities to ensure information is safeguarded against outside parties.
  • Test & maintain network infrastructure including SW & HW devices.
• Additional Tasks:
  • Ensure application of security patches for commercial products integrated into system design meet timelines dictated by management authority for intended operational environment.
  • Implement new system design procedures, test procedures, & quality standards.
  • Integrate new systems into existing network architecture.
  • Provide feedback on network requirements, including network architecture & infrastructure.

Specific to this contract, this role will provide Network Engineering support as part of the Network & System Support team, including, but not limited to:

• Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based .edu LAN network to include but not limited to routing & switching configurations; routing protocols such as OSP, EIGRP, BGP, & HSRP / VRRP; ACLs; site-to-site VPNs & tunnels; VLANs & trunking; VRF; STP; Port Security; QoS; IPSec; encryption protocols; TACACS+ / RADIUS; 802.1x; SSH; HTTPS/TLS; SNMPv3; NTP; DHCP; DNS; SysLog; NetFlow; bandwidth utilization & traffic patterns; packet capture & analysis; configuration backups & recovery; IOS & firmware upgrades; connections to Azure Cloud & internet; centralized AAA; applying & verifying DISA STIGs; & Cisco Security Advisories.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based wireless BYOD CampusNet network to include but not limited to WLCs; WAPs enforcing WPA3-Enterprise or WPA2-AES encryption protocols on all SSIDs; WIDS/WIPS to detect & mitigate rogue access points & ensure guest traffic never touches internal LAN; RF site surveys to identify coverage gaps, “dead zones,” & high-interference areas; monitoring RF spectrum for non-Wi-Fi interference; RSSI & SNR for all floors/buildings; Co-Channel Interference; STIG & Access Point STIG; Cisco AireOS or IOS-XE wireless images across fleet of Aps; & Cisco DDNAC or Prime Infrastructure for centralized monitoring.
• Create & manage Cisco TAC tickets as required & report status to Customer.
• Develop, manage, report, & document IPAM & VLAN management.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure network circuits & connections.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure network access controls, administrative authentication, & logging on both .edu LAN & BYOD CampusNet wireless network via Cisco Secure ACS or Cisco ISE.
• Coordinate with DISA or commercial providers for installation, testing, & troubleshooting of WAN/Cloud circuits.
• Create & update accurate physical & logical network diagrams & rack elevations for .edu LAN & BYOD CampusNet wireless network to include all supported locations.
• Create & update systems architecture documentation to provide functional overview of solution; map technology capabilities & components to requirements.
• Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures.
• Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents, to include lessons learned & recommendations.
• Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all LAN & wireless HW, SW, OS, firmware, & tools.
• Support Cisco RMA & other HW & SW warranty actions IAW Government direction & processes.
• Install, move, & cable LAN & wireless HW such as physical routers, switches, WLCs, & WAPs in data centers & TRs at all supported locations; support technical refresh projects & changes to requirements.
• Update all network devices to include routers, switches, WAPs, WLCs, applications, SW, protocols, & network services IAW applicable IAVAs, IAVBs, IAVMs, MCDs, OPDIRs, CIO directives; execute patches; & report compliance as required by Government-established processes & deadlines.
• Assist with addressing & solving system connectivity & failure to increase network uptime.