Network Operations Engineer

• Operate and maintain secure network solutions operated as a centralized enterprise capability for the US Army.
• Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide tier III support for the Army global network.
• Analyze and understand secure wide area connectivity inclusive of underlay, overlay, and transport design that supports performance, quality of service, security, and mission requirements.
• Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies.
• Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff.
• Collect, investigate, and identify network optimization strategies and techniques to meet capacity and performance standards.
• Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture.

Must have and maintain an active SECRET security clearance or higher. (US Citizenship required), * Minimum of a Bachelor’s degree with 8+ years’ experience or Master’s degree with 6+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).

• Require network certification which shall meet or exceed a CCNA (comparable vender certification accepted upon review).
• Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.
• Heavily experienced in patching, upgrading, and lifecycle refresh of network devices.
• Demonstrated experience with networking concepts and protocols: LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and Firewalls.
• Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation.
• Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, Palo Alto, Dell, or AppGate.
• Experience with the following protocols: SFTP, SSH, SCP, SNMP, NTP.
• Must be able to work as part of a team to lead troubleshooting and resolve complex network issues.
• Excellent written and verbal communication skills., * Certified Cisco Network Professional (CCNP) or equivalent.
• Experience with virtualized network devices and infrastructure
• Hands on experience with Cisco SD-WAN.
• Hands on experience with Palo Alto Next Generation Firewalls (NGFW)
• Knowledge and use of NetSecOps technologies including git, Gitlab CI/CD, Ansible, Terraform, and network element managers
• Demonstrate expertise in design and improvement of complex and geographically enterprise networks.
• Expert knowledge of US Army security requirements for network infrastructure.