Senior Network Engineer (Active Top Secret Clearance)

Senior Network EngineerPer Federal Contract U.S. Citizenship RequiredActive Top Secret Clearance RequiredFt Meade - Onsite 5 days a week$160K Direct Permanent Hire plus Benefits PackageClearance Required:Must have active Top Secret clearance with SCI eligibilityMinimum Education:Bachelor’s Degree in an IT related field – additional years of relevant experience and certifications can be substituted for the college degree.Minimum Years of Experience: 10 yearsRequired Certifications:Must meet DoD 8570.01-M IAT-II or IAM-I baseline certification requirementsCCNA-Security, CySA , GSEC, SSCP, CAP, GSLC, or Security CEResponsibilities:The duties and responsibilities of the Senior Network Engineer include, but are not limited to: Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.?Design, build, and troubleshoot network and network security architecture.?Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.?Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.Coordinate with the Information Assurance Security Engineers to validate all designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.?Create, review, and update technical documentation in support of integration projects.Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.?Identify and diagnose complex performance, security, and technical issues.Requirements:Cisco Certified Network Professional (CCNP) certificationExperience building, troubleshooting and testing:IS-IS and/or OSPF networksMP-BGP underlays and overlaysMPLS networks: RSVP-TE, LDP, and SR-MPLSRouting policy and redistributionDMVPN and/or SD-WANDifferent flavors of STPNetwork security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS , firewall NAT and security policiesExperience standing up and troubleshooting new circuits with the ability to fault isolate issues to CE equipment, Demarc and/or CarrierExperience with MS Office applications such as Excel, Word, Outlook, and SharePoint.Ability to work both independently and as part of a team in a dynamic environment.Ability to travel up to 20%.Preferred:Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.Extensive experience with Cisco IP telephony products?Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142Experience developing IT checklists, SOPs, guides, etc.

Salary : $160,000 - $180,000