Senior Network Design Engineer

Description

• Lead Engineer responsible for designing network changes, evaluating, and engineering network solutions based upon customer requirements.
• Proficient in support of network design and Cloud services [Amazon Web Services (AWS) AZURE].
• Support enterprise standards in accordance with corporate direction to include:

(1) Support documentation development,

(2) Lead technical working groups

(3) Conduct product evaluations

(4) Develop recommendations

(5) Conduct pre-implementation activities.

• Lead and support design, test, installation, integration, and migration strategies.
• Design solution documentation that outlines guidance on licensing, physical architecture, logical configuration, eligibility, checklist application inventory, security policy protection phases, and basic administration to include system configuration baseline and security policy configuration baseline.
• Leverage Senior level knowledge and experience to lead network solutions in compliance with DISA and DoD protocols and policies.
• Ensure migration and implementation efforts conform to the physical and logical infrastructure and security configurations (such as Access Control List (ACLs) and deny-by-default).
• Responsible for all lifecycle components’ compliance with security controls, including confidentiality, integrity, and availability as well as compliance with Security Technical Implementation Guidelines (STIG) in depth.
• Lead recommendations in operational processes to ensure successful maintenance of firewalls and load balancers.
• Prepare and solution design/technical documentation to include briefings and other required documents to support all engineering and implementation efforts with established policy and processes.
• Provide technical writing support to create Standard Operating Procedures (SOPs), and Tactics, Techniques, and Procedures (TTPs), and ensure all documents and reports are written and formatted properly.
• Use the established change management process to provide changes in response to policies, security, or customer requests for network architecture design.
• Ensure compliance with directives for ports and protocols and engineer proxy capabilities required by the customer.
• Proficiently communicate and brief ideas and information to people of a non-technical background include senior leadership.

Requirements

Required Skills:

• MUST have an active Secret Clearance (or higher) 
• DoD 8570/8140 IAT Level II Certification (i.e. Security+, GICSP, GSEC, SSCP, CASP, CISA, CISSP, GCED, or GCIH) required and an additional CE certification that applies to the position.
• Advanced Routing and Switching (Cisco NX-OS, Cisco IOS, JUNOS, PANOS, etc.)
• BGP, OSPF and vPC
• Firewall technologies (i.e. Palo Alto, Cisco Firepower, etc.)
• Network Management Technologies (SNMP, Syslog, Packet Analysis, etc.)
• Fundamental experience in DNS
• VPN technologies (GRE, IPSec, DMVPN, MPLS, etc.)
• Experience with Cloud Environment, preferably Azure but AWS is transferrable.
• Team collaboration and ability to work independently.
• Lead efforts and delegate responsibilities without need of instruction or direction.
• Motivation to think outside of the box and present the practical solutions to the customer.

Preferred Skills:

• Cisco Fabric and ACI
• Application Delivery Controller (F5)
• F5 GTM / LTM / APM / ASM
• DoD or DISA environment and policy experience is a plus.
• Proactive Critical Thinking Skills
• Network Automation Development
• Experience with PowerDNS or BIND
• Experience with Code Upgrades
• Experience speaking with Vendors (TAC cases)
• Working with Service Now ticketing system (NOW Platform)
• IPv6 Networking Knowledge