Description:

GES is seeking a Network Engineer to join our Defense Enclave Services (DES) team at Ft. Meade, MD.

Program Summary:

The DES program is a highly demanding mission and requires expert technical and professional management to support DISA’s enterprise Information Technology (IT) services. You will be supporting a large and complex IT discovery, design, and migration effort towards a Single Service Provider model for the Department of Defense. This role will include discovery analysis and design activities required to migrate common IT services from multiple large-scale DoD agencies into DoDNet.

Basic Qualifications:

• Minimum of a Bachelor’s degree in Science, Technology, Engineering and Math (preferred) with 12-15 years' experience or Master's degree with 10-13 years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).

• Require network certification which shall meet or exceed a CCNA (comparable vender certification accepted upon review).

• Require active DoD IAT Level II (i.e. Security ) certification or equivalent prior to start.

• Experience documenting logical or physical designs using drawing tools (e.g. Visio, Powerpoint, Gliffy, Cameo, MagicDraw) to depict systems, subsystems, interfaces, components, and communications of I/T applications and infrastructure

• Experienced and comfortable with conducting technical troubleshooting to resolve issues.

• Experience conducting site surveys or analyzing data obtained from site surveys.

• Experience creating or executing a migration plan to move circuits, network traffic, services, applications, or data between environments or to a commercial cloud provider. Alternatively, experience planning or executing a technology refresh or lifecycle refresh of an existing I/T system.

• Heavily experienced in upgrading and LCR of network devices.

• Must have broad exposure to common I/T infrastructure networking in the areas of LAN, WAN, TCP/UDP, IPSec, VPN, Proxies, Routing(L2/L3), and Firewalls.

• Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, and Fortinet.

• Demonstrate experience in designing and implementing medium to large network infrastructure and producing corresponding technical documentation.

• Must be able to work as part of a team to troubleshoot and resolve complex network issues.

• Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation.

• Requires ability to communicate with executive leadership (internally or client) regarding matters of significant important to the organization/project.

• Must be able to present designs and plans to technical leadership personnel and

Responsibilities:

• Plan and design secure network solutions to consolidate connectivity services under an enterprise service. 

• Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and unique requirements to develop a design and architecture leveraging approved design patterns.

• Design secure wide area connectivity inclusive of underlay, overlay, and COI transport design that supports performance, quality of service, security, and mission requirements.

• Provide secure access solutions leveraging wired and wireless technologies, integrating standards, use cases/scenarios, and develop associated implementation and transition plans.

• Integrate capacity planning and scaling of network and security stack environments into the overall design of solutions.

• Collect, investigate, and identify network optimization strategies and techniques to meet capacity and performance standards.

• Identify legacy service paths (i.e. dataflow, firewall rulesets, and ACLs) and develop strategies and designs for the to-be enterprise service capability to meet requirements while balancing security, sustainability, and maintainability.

• Support development of IP addressing schemes across IPv4 and IPv6 networks.

• Work with information assurance teams to ensure compliance to DoD standards to assist with providing accreditation artifacts.

Preferred Qualifications:

• Certified Cisco Network Professional (CCNP) or equivalent.

• Demonstrate experience in one or more of the following enterprise network management tools such as PaloAlto Panorama, SolarWinds, Cisco Prime, Cisco DNA, What’s Up Gold, or Junos Space.

• Experience in designing and implementing VTC solutions.

• Experience with ScienceLogic SL1 and/or SolarWinds.

• Hands on experience with SD-WAN.

• Demonstrate expertise in design and improvement of complex and geographically enterprise networks.

• Expert knowledge of DoD security requirements for network infrastructure.

• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation.

Clearance/Citizenship: 

• Must hold an active Secret security clearance 

• Must be US Citizen

Location:

• Ft. Meade, MD; Telework available. Telework schedule depends on DAFA and customer schedule. 

• Candidates must be willing/able to come to Ft. Meade, MD as needed.