Network Engineer with Security Clearance

---

Job description

The Network Engineer will demonstrate a strong understanding of all network technologies, with an emphasis on the Juniper platform, while supporting the Laboratory's enterprise classified networks with exemplary customer service. This individual will be responsible for the research and design of new network services and enhancements to existing services. The ideal candidate will have a solid background with subnetting, switching, routing, firewall configuration to include managing security zones to limit east/west traffic, configuring and managing TACLANEs and supporting VTC appliances; familiarity with Commercial Solutions for Classified (CSfC) would be a bonus. This candidate will also possess a strong understanding of network automation and virtualization utilizing technologies such as Ansible and VMware NSX. Finally, preference will be given to candidates with experience supporting cloud infrastructure, ideally in classified environments but public experience would also be considered. As part of this role the individual will need to demonstrate proficiency applying STIGs and understanding how to use DISA's STIG Viewer to evaluate systems for STIG compliance. This position is 100% dedicated to supporting classified environments. Network Design and Engineering responsibilities include but not limited to:
•Design, implement and maintain a secure, robust and fault tolerant network infrastructure.
•Monitor and update configurations to maintain STIG compliance.
•Perform code, software and firmware updates as needed to ensure network infrastructure is kept up to date with current versions.
•Research, develop and implement automation to support the items noted above and enhance our network infrastructure.
•In collaboration with the CES infrastructure team, develop and execute a plan to integrate classified cloud services with our existing on-premise networks.
•Provide project support to internal teams where expertise in classified networks is required.
•Provide day-to-day guidance, mentoring and tasking to members of the CES Network Team. Network Support responsibilities include but not limited to:
•Provide 1st tier support resolving Service Desk tickets.
•Maintain security documentation and network diagrams. Required Minimum
•Experience with Juniper network hardware
•Experience with Palo Alto firewalls
•Experience with General Dynamics type 1 encryptors and the GEMOne management software
•Experience with network automation (preferably with Ansible)
•Experience with cloud network integration (preferably classified cloud)
•Expert knowledge of TCP/IP, DNS, DHCP, SNMP and BGP protocols.
•Strong understanding of DoD networks and STIG security controls
•Security+ certification or the ability to obtain within 6 months
•Demonstrated ability to learn new technologies and disciplines quickly
•Ability to work independently toward delivery of goals as well as collaborate in team efforts
•Strong foundational skills in organizing and managing technical projects
•Excellent customer service skills (verbal and written)
•Bachelor's degree in a relevant field or the equivalent technical experience and certifications. Preferred
•Experience with the Command Cyber Readiness Inspection (CCRI) process and maintaining an inspection ready environment.

<!– job description page –>