Senior Network Engineer

Description

The team is looking for a senior network engineer to work at Joint Base Pearl Harbor Hickam in Honolulu, supporting IT systems used by more than 5,000 users across the Pacific theater.

The work covers time-sensitive Command and Control (C2) efforts and complex technical problems that bear on national security and readiness.

The company is a private defense and government solutions business founded in 1989 and headquartered in Reston, Virginia. It works in data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.

Responsibilities

• Act as the subject matter expert for LAN, BAN, and WAN transport work within the customer's area of responsibility.
• Analyze network systems and make recommendations. Configure Layer-2 and Layer-3 devices and carry out approved changes on production enterprise and data center networks.
• Work with the Systems Engineering, Systems Operations, Network Operations, and Enterprise Service Desk (ESD) teams on the customer's IT architecture and engineering efforts.
• Design, build, and deploy approved LAN, WAN, and cryptographic architectures that support data integration plans. Define the functional testing approach and record the results.
• Design and implement NSA-approved Commercial Solutions for Classified (CSfC) capability packages and approved encryption methods.
• Configure, support, and troubleshoot external BGP (eBGP) routing in a Palo Alto environment.
• Provide Tier-3 support for network issues, including reviewing and troubleshooting network, transport, and protocol problems.
• Serve as the escalation point for incidents and provide incident coverage.
• Write and standardize network configurations.
• Discover and assess networks: inventory architecture and components such as devices, IOS versions, capabilities and configurations, IP addresses and subnets, VPNs, circuit details, and WAN protocols.
• Write scripts and use network tools to collect data on network components and device configurations automatically.
• Coordinate internal and external resources for network and secure transport engineering work.
• Review customer requirements and propose solutions, including bills of materials (LOM), proposals, and supporting documents such as solution diagrams and implementation timelines.
• Work with circuit providers such as DISA and coordinate the circuit actions required.
• Keep network devices and systems secure and aligned with DoD Secure Technical Implementation Guidelines (STIGs).
• Review implementations and contribute to analysis and After-Action Reports (AARs).
• Regularly gather and summarize network accomplishments, issues, and concerns.
• Complete activity reports as the contract requires.
• Make sure Government equipment and its components are properly tracked and held in custody.
• Take on related technology work and special projects as needed.

Requirements

• An active, in-scope TOP SECRET clearance with SCI eligibility.
• A bachelor's degree in IT, networking, or a similar field, or 8+ years of enterprise IT network engineering and operations, including complex classified DoD environments and required security controls such as STIGs.
• 5+ years implementing and supporting Layer-3 networking.
• Extensive experience with Cisco routing and switching.
• Prior experience implementing and supporting DoD secure networks, including firewalls, encryption and SSL, network separation, VLANs, tunnels, and TACLANEs.
• 3+ years of firewall experience, with strong skills in firewall implementation, routing, protocol analysis, and troubleshooting.
• DoD 8570 IAT-II compliance through one of: Security+ CE, CCNA, CND, CySA+, GICSP, GSEC, or SSCP.
• Cisco Certified Network Professional (CCNP) Enterprise or Security certification.
• Prior experience with NSA CSfC requirements, including the Multi-Site Connectivity Capability Package (MSCCP) and the Mobile Access Capability Package (MACP).
• Prior experience with Cross Domain Solutions (CDS) and/or the DISA Trusted Network Environment (TNE).
• Strong attention to detail, planning, and time management.
• Clear written and verbal communication, and a good team player.
• Customer-service attitude and willingness to pitch in and help.
• Ability to follow instructions and work both independently and within a distributed team.
• Ability to support 24/7 operations, including exercises, when needed.

Conditions

Work is in a normal office environment at Joint Base Pearl Harbor Hickam in Honolulu.

The pace is fast and deadline-driven.

Occasionally you may work non-traditional hours, including consecutive nights or weekends.

Equal opportunity: all qualified applicants are considered without discrimination.

Benefits

• Preferred qualifications that set you apart include: CCIE certification or higher; additional IT certifications in platforms such as Cisco, Citrix, Dell, HPE/Aruba, ITIL, Juniper, Microsoft, Nutanix, Palo Alto, or VMware; experience with Palo Alto Network Security Platform and/or Cisco Secure; experience with Forcepoint, Brocade, and/or Juniper; familiarity with Zero Trust Architecture (ZTA); familiarity with VDI and virtual environments such as VMware Horizon or Citrix VDI; familiarity with Hyperconverged Infrastructure (HCI), Multi-factor Authentication (MFA), and C2 applications; experience with ITIL practices such as change, configuration, and capacity management; and help desk or software tool experience with Jira, Remedy, or ServiceNow.