Duties / Responsibilities

• Work with other network architects, engineers and DHS stakeholders in the design, installation, and configuration of the network to achieve the established business and security requirements.
• Collaborate with DHS HQ, DHS Components, and application stakeholders to design, install, and support network solutions to meet requirements.
• Perform “as is” analyzes of existing network technologies and make recommendations and produce roadmaps of changes as needed to optimize performance and improve network performance.
• Be able to take a lead role in the design process working closely with program team.
• Design, configure, and support complex routing and switching, security and VPN technologies in a WAN environment.
• Develop and submit recommendations for new or modified configurations for the HSEN Architecture to incorporate emerging technologies, new releases, support center maintenance, or requirements into the HSEN environment.
• As part of HSEN Architecture Review Board (ARB), review network solution requirements for technical feasibility and conformance to DHS’s network architecture and design standards.
• Establish effective working relationships with industry vendors to ensure alignment of current and future set requirements.

Minimum Qualifications / Requirements

• 10 years of network engineering and architecture demonstrated experience in designing, configuring, monitoring, and troubleshooting complex networks within a large enterprise environment.
• 5 years hands-on experience with Cisco routing, switching and firewall technology (e.g., ISR, ASR, CSR, ASA, Nexus, TACACS/ISE)
• Very strong knowledge of routing protocols (e.g., BGP, EIGRP, OSPF) and network protocols (e.g., TCP/IP, GRE, IPSEC, and VRF)
• A strong understanding of MPLS, DMVPN, and SD-WAN required.
• Strong knowledge of routing/switching, firewalls, load balancers and proxy servers
• High level architectural and operational experience with complex networks.
• Experience in organizing and leading network requirements facilitation sessions
• Experience in network monitoring and management tools.
• Experience in creating and updating network diagrams (Visio)

Education

BA / BS (relevant field); relevant experience may be a substitute for education.

Certifications Required

CCNP, JNCIP or equivalent.

Certifications Desired

CCIE

Software/Hardware Desired

Palo Alto firewalls, F5 Load Balancers, Bluecoat/Symantec Proxies, SDN/SD-WAN, Cloud (AWS, Azure, O365), SaaS, PaaS, IaaS, Unix/Linux, Python, Perl, NetScout, ASA, vASA and FirePower.