Network Engineer

Description

The team supports a sponsor that runs an online public contact portal, covering both the open internet and the dark web, along with one or more specialized networks.

Both systems are critical to the sponsor's operations, so the sponsor needs an experienced team to build, lead, and deliver solutions that meet technical, tradecraft, and security requirements.

This is posted under BT-491 for cyber security project engineers, IT program managers, and network engineers.

Responsibilities

• Deliver tradecraft, technical, and network solutions that secure, maintain, and upgrade the sponsor's portals and specialized network.
• Use current internet technologies and services to protect the portals and their visitors, and to protect the specialized network.
• Research, build, maintain, and document the design and implementation of the portals and the network.
• Work with internal teams, external teams, and other contractors to define, document, and deliver portal and network requirements for security and operations.
• Work with sponsor staff, contractor personnel, and external stakeholders, and record user stories with them.
• Use existing systems wherever possible. Any deviation, including in the architecture or interfaces, needs prior approval through the sponsor's waiver process.
• Make sure each new application or enhancement meets the agreed SLAs for uptime, concurrent users, and recovery, and monitor each application with a plan for resolving failures.
• Follow the sponsor's risk management framework throughout the project to find and reduce vulnerabilities and risks.
• Track requirements, action items, and deadlines, and log issues in the sponsor's approved tracking system.
• Collect, compile, evaluate, and publish data and statistics for documents, reports, plans, policies, and regulations when asked.
• Build software that implements system-level requirements, and carry out development work the sponsor requests.
• Update the portals' software to reflect changes in partner needs, legislation, and policy, and add new functionality.
• Test new and existing applications and networks for functionality.
• Provide on-call support.

Requirements

• Hands-on experience in network engineering and a strong grasp of network protocols and technologies.
• Experience running online public portals or similar systems.
• Experience with network hardware, software, internet networking, and encryption protocols.
• Knowledge of how browsers work with websites, and of browser security settings.
• Experience with content delivery networks and how they interact with public services and websites.
• Experience using Tor and setting up and maintaining Tor onion services.
• Experience with open and dark web security settings and tools that protect sites and their visitors.
• Experience analyzing cyber selector data, system logs, and network traffic.
• Experience troubleshooting networks and browsers.
• Experience applying security standards as operational tradecraft changes quickly.
• Experience explaining complex technical topics to non-technical people.
• Experience communicating with technical and non-technical stakeholders to balance requirements, performance, cost, and security in solution design.
• Experience defining, analyzing, tracking, and reviewing requirements.
• Experience documenting network configurations, processes, and procedures.
• Highly desired: experience configuring virtual private servers, virtual private networks, and virtual private clouds.
• Highly desired: experience with social media or commercial messaging apps.
• Highly desired: understanding of mobile technologies and apps.
• Highly desired: experience troubleshooting network connectivity and performance problems.
• Highly desired: experience with network monitoring tools.
• Highly desired: Python scripting experience.
• Highly desired: experience building JavaScript, HTML, and CSS user interfaces.
• Highly desired: experience with technologies such as Cisco, Juniper, Forward Networks, VMware, and SolarWinds.
• Highly desired: an IT certification in Linux, Microsoft, or another network field.
• Highly desired: certifications such as Cisco CCNA, Cisco CCNP, Certified Information Systems Security Professional, or Juniper JNCIA Enterprise/Service Provider Routing and Switching.

Conditions

An active Poly clearance is required. Applicants without one will not be considered.

On-call availability is required. You must reach the sponsor's site within 2 hours for network issues and resolve a system outage within 3 hours. The repair may take longer if the fault lies in infrastructure the sponsor maintains.