Position Summary

Perform configuration, patching, image management, troubleshooting, and Tier III escalation support across multiple classification domains. Support the design, implementation, operation & maintenance, and troubleshooting of enterprise and site-level networks.

Job Description

The Sponsor's office delivers critical ITE services and ensures integrated system architectures across IC elements while directing all IC information-security policies and practices for national security systems. This role provides immediate support for configuration, patching, image management, troubleshooting, and Tier III escalation support across multiple classification domains.

The Network Engineer will support the design, implementation, operation, maintenance, and troubleshooting of Sponsor enterprise and site-level network environments across classified and unclassified domains. The position requires expertise in enterprise-scale networking environments with deep knowledge of Cisco ISR/ASR routers, Catalyst/Nexus switches, and ASA and Firepower firewalls.

Key technical requirements include proficiency with IP routing protocols (OSPF, EIGRP, BGP), VLAN design and spanning-tree protocols (STP/RSTP/MST), HSRP/VRRP/GLBP configurations, IP services (NAT, ACL, QoS), and comprehensive traffic monitoring capabilities. The role demands strong understanding of network fundamentals including DHCP, DNS, NTP, IP subnetting, and route summarization.

The position involves working with various network monitoring and analysis tools, implementing VPN technologies for secure connectivity, and ensuring compliance with NIST and IC cybersecurity policies, standards, and best practices across all network implementations.

Travel Requirement: Weekly or monthly travel between Sponsor locations in Tysons, VA and Bethesda, MD.

Mandatory Skills

• Enterprise Networking: Demonstrated experience supporting enterprise-scale networking environments
• Cisco Infrastructure: Proficiency with Cisco ISR/ASR routers, Catalyst/Nexus switches, ASA and Firepower firewalls
• Routing & Switching: IP routing protocols (OSPF, EIGRP, BGP), VLAN design, spanning-tree protocols (STP/RSTP/MST)
• High Availability: HSRP/VRRP/GLBP redundancy protocols
• IP Services: NAT, ACL, QoS implementation and traffic monitoring
• Network Monitoring: SolarWinds, PRTG, Cisco Prime, packet capture tools (Wireshark, tcpdump)
• Network Fundamentals: DHCP, DNS, NTP, IP subnetting, and route summarization
• VPN Technologies: IPsec, SSL, DMVPN, site-to-site, and remote access VPN implementations
• Security Compliance: Understanding of NIST and IC cybersecurity policies, standards, and best practices

Desired Skills

• Network Automation: Python or Ansible for network automation platforms and tooling
• SD-WAN Technologies: Cisco SD-WAN/Viptela experience
• Cloud Networking: AWS or Azure networking services
• Network Virtualization: VMware, Hyper-V, or Cisco UCS platforms