Sr. Network Engineer

SOSi is currently seeking an experienced Sr. Network Engineer to join our team in Joint Base Pearl Harbor Hickam, Honolulu, Hawaii. The customer based out of Honolulu, Hawaii creates, manages, and supports IT solutions for our customer, its mission and its 5,000 customers throughout the Pacific theater. Our team solves challenging technical problems that enable our customer to realize critical and time sensitive C2 strategies.

As a Senior Network Engineer at SOS International LLC, you will serve as a Subject Matter Expert (SME) for network/transport (LAN/BAN/WAN) initiatives within the customer's Area-of-Responsibility (AOR).  Your role includes conducting network systems analysis and recommendations, configuring Layer-2/Layer-3 devices, implementing approved changes on the production enterprise/data center networks, and coordinating and participating in the customer's IT architecture/engineering efforts alongside the Systems Engineering, Systems Operations, Network Operations, and the Enterprise Service Desk (ESD) teams.

• Design, develop, and implement approved LAN/WAN/cryptographic architectures to support data integration plans. Determine functional testing strategy and document results.
• Design, develop and implement National Security Agency (NSA) approved Commercial Solutions for Classified (CSfC) capability packages and Taclane encryption methods.
• Configures, supports, and troubleshoots External Border Gateway Protocol (eBGP) routing within a Palo Alto environment.
• Provides Tier-3 support to network-related issues. Reviews and troubleshoots network, transport, and protocol related issues. Acts as a point of incident escalation and coverage.
• Develops, documents, and standardizes network configurations.
• Performs network discovery and assessment: inventories & identifies network architecture and components (e.g., network devices, IOS versions, device capabilities/configurations, IP addresses/subnets, VPNs, circuit information, WAN protocols etc.). Employ scripts and related network tools to automate data-collection of networking components and relevant network device configurations.
• Coordinates internal and external resources relevant to network and secure transport engineering initiatives.
• Reviews Customer requirements and recommends solutions to include List of Materials (LOM), proposals and related supporting documents (e.g., solution diagrams, implementation timelines, etc.)
• Interact with circuit providers (e.g., DISA) and manage (coordinate) required circuit actions.
• Upholds the integrity and security of network devices and systems according to Department of Defense (DoD) Secure Technical Implementation Guidelines (STIGs).
• Reviews work efforts/implementations and contributes to analysis, After-Action-Reports (AAR). Regularly collects and summarizes pertinent network-related accomplishments, issues, and concerns. Completes activity reports in accordance with contract requirements.
• Ensures compliance of custody and ownership of Government equipment and related components.
• Participates in related solution technologies and special projects, as required.

• An Active in-scope TOP SECRET clearance with SCI eligibility.
• DoD 8570 IAT-II compliant (Security CE, CCNA-Security, CND, CySA , GICSP, GSEC, or SSCP).
• Cisco Certified Network Professional (CCNP) Enterprise or Security certification.
• Team-player. Able to communicate effectively, verbally and in writing.
• Attention to detail. Excellent planning and time-management skills.
• Bachelors degree in IT, Networking, or similar or 8 years of experience in enterprise IT network engineering and operations involving complex classified DoD environments and mandatory security controls (e.g., STIGs).
• 5 years implementation and support to Layer-3 networking. Extensive experience with Cisco’s routing and switching portfolio. Prior experience in implementing and supporting DoD secure network environments (firewalls, encryption/SSL, network separation, VLANs, tunnels, TACLANES etc.)
• 3 years firewall experience. Highly familiar with firewall implementation, routing, protocol analysis and troubleshooting.
• Prior experience with NSA CSfC requirements including Multi-Site Connectivity Capability Package (MSCCP) and Mobile Access Capability Package (MACP).
• Prior experience with Cross Domain Solutions (CDS) and/or DISA Trusted Network Environment (TNE)
• Customer-service oriented with a willingness to participate and assist.
• Able to support 24/7 operations (including support to exercises), when necessary.
• Able to follow instructions and work both independently and in a (distributed) team environment.

• Cisco Certified Internetwork Expert (CCIE) certification.
• Additional IT certifications in relevant technology platform (e.g., Cisco, Citrix, Dell, HPE/Aruba, ITIL, Juniper, Microsoft, Nutanix, Palo Alto, VMware)
• Prior experience with Palo Alto Network Security Platform and/or Cisco Secure portfolio.
• Prior experience with Forcepoint, Brocade, and/or Juniper technologies.
• Familiarity with Zero Trust Architecture (ZTA).
• Familiarity with VDI/Virtual Environments and solutions (VMware Horizon, Citrix VDI)
• Familiarity with Hyperconverged Infrastructure (HCI), Multi-factor Authentication (MFA) and C2 applications.
• Experience in ITIL framework and best practices (e.g., Change Management, Configuration Management, Capacity Planning)
• Prior Help Desk/software experience (e.g., Jira, Remedy, ServiceNow).

• Working conditions are normal for an office environment.
• Fast paced, deadline-oriented environment.
• May require periods of non-traditional working hours including consecutive nights or weekends.

All interested individuals will receive consideration and will not be discriminated against for any reason.