Network Engineer

Description

The network engineer supports the Security Assistance Group - Ukraine (SAG-U) through the Enterprise Mission Information Technology Services (EMITS) program, serving U.S. Army Europe and Africa (USAREUR-AF) from Wiesbaden, Germany.

You will design, plan and build the SAG-U Mission Partner Network and harden and maintain the organization's existing commercial network.

The role covers large changes to core routing and switching, major network expansions, and fresh solutions for hard technical problems, including multi-tenant designs that support an operational mission.

The company is a global technology and professional services firm with about 26,000 staff in 50+ countries, serving U.S. government, defense and intelligence agencies with cloud, cyber, AI and software work.

This is a regular, full-time position in IT Infrastructure and Operations, with no Public Trust requirement.

Responsibilities

• Assess customer needs and propose technical solutions to complex problems.
• Plan and build the hardware and software for the SAG-U Mission Partner Network and the commercial network.
• Lead major changes to core routing and switching, along with large network modifications and expansions.
• Set up routers, switches, firewalls, VPN concentrators, and LAN and WAN links using sound engineering and communication protocols.
• Maintain and upgrade servers, routers, switches, firewalls and remote access systems.
• Keep the network connected and secure, follow policy, and keep backup and recovery in place.
• Monitor the network with leading tools, work with systems and security teams, and respond to traffic anomalies and security concerns.
• Run Cisco Umbrella DNS services.
• Test new communication technologies that could improve the network, and deploy multi-tenant solutions.
• Arrange purchases of hardware, software and subcontractor services, prepare designs and initial bills of material, and work with vendors on new systems.
• Train and document for the Help Desk and other teams, give technical help, and coach less experienced staff.
• Keep your technical knowledge current and earn or renew the certifications the mission needs.
• Support other network issues that affect the SAG-U mission, including changing and supporting configurations.
• You may act as a team or task lead.

Requirements

• 5+ years of network engineering experience.
• Bachelor's degree or equivalent experience.
• Experience designing and building routed networks across multiple enclaves and vendors, with high availability.
• Working knowledge and hands-on experience with Cisco Identity Services Engine (ISE), including design, protocols, profiles, management and functions.
• Working knowledge and hands-on experience with Cisco Firepower Management Center (FMC).
• Experience with Windows Server 2019.
• CCNA or an equivalent industry certification.
• IAT Level II or higher certification to meet DoW 8570 requirements.
• Ability to work alone and as part of a collaborative team.
• Occasional physical activity, including lifting, bending, crouching to troubleshoot equipment, and long periods of sitting.
• US citizenship is required.
• You must hold a DoW Secret clearance and keep it current.

Conditions

On-site role at the customer location at Wiesbaden Army Airfield, Wiesbaden, Germany; telecommuting is not available.

You must be eligible for German TESA.

Scheduled hours are 40 per week.

Travel is less than 10% of the time.

Shift work, or coverage on weekends and holidays, may be required.

The likely salary range is $93,662 - $126,500. This is not a guarantee. Pay is set by experience, location and possibly contract terms, and may fall outside this range.

International pay varies with tax, social security, immigration status and location. An international assignment may add allowances, premium uplifts, or relocation or transport benefits on top of base pay.

The required clearance is currently Secret, and Top Secret must be obtainable.

As part of hiring, you will complete an identity verification that uses biometrics and AI, and you must be on camera for virtual interviews. The company may photograph you for verification, and by continuing you consent to the use of your biometric data for that purpose.

The company is an equal opportunity employer and welcomes applicants with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision coverage.
• 401(k) with pre-tax and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible.
• Paid vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short-term and long-term disability, life insurance, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• Internal mobility team to help you manage your career.
• Professional growth, including paid education and certifications.
• Hands-on work with current technology.
• Preferred: current CCNP Routing and Switching or CCNP Enterprise certification.
• Preferred: knowledge and experience with routing, switching and encryption protocols such as OSPF, EIGRP, BGP, Spanning Tree Protocol, ISAKMP, ESP and MACsec.
• Preferred: knowledge and experience with URL and network filtering and geo-blocking.
• Preferred: knowledge and experience with VMware.
• Preferred: understanding of ACLs, route maps, and ports and protocols, and the ability to help cybersecurity staff with boundary security on routers and firewalls.
• Preferred: ability to produce complex network diagrams that support cybersecurity teams during accreditation.
• Preferred: Top Secret security clearance.
• Preferred German TESA experience, meeting one of: a bachelor's degree plus 3 years of recent specialized experience; an associate's degree plus 7 years of recent specialized experience; a major certification plus 7 years of recent specialized experience; or 11 years of recent specialized experience.