Lead Network Engineer

• Lead network engineering for the team: set technical direction, make the hard troubleshooting calls, and represent network engineering with the Government.
• Operate, maintain and administer firewalls, routers, switches and wireless equipment, and respond to, troubleshoot and fix network problems.
• Perform hardware maintenance and upgrades, IOS upgrades, router and switch configuration updates, firmware upgrades and security patches.
• Monitor routers, switches, firewalls and wireless controllers to catch incidents, outages and degradation early, working through incident management.
• Operate and maintain connectivity between the headquarters data center, Azure and the failover sites.
• Keep enterprise network architecture diagrams, equipment room layouts, rack elevations and configurations accurate, documenting each change within two business days.
• Produce weekly network availability and utilization reports, support acquisition of network equipment, and coordinate upgrades with engineering and IT security for Government approval.
• Configure network devices to NIST, USGCB and DISA STIG baselines.

• Cisco Certified Network Professional (CCNP) or Cisco Certified Internetwork Expert (CCIE), current.
• 10 years of IT experience providing Tier 3 support.
• 10 years in a Tier 3 Cisco network support environment, designing, documenting and supporting LAN and WAN networks, firewalls and enterprise wireless.
• 10 years of hands-on implementation of Cisco firewalls (FPR 4112, FMC, ASA 5555), including ACLs, NAT, site-to-site and remote access VPNs, IOS upgrades and AnyConnect configuration.
• 10 years of hands-on implementation of core switches (Cisco Nexus 7k), edge switches (Catalyst 9300-U/UXM, 3850, 3650), routers (ASR 1006, ASR 1001, 8300) and bandwidth management appliances.
• 10 years designing, configuring and troubleshooting routing protocols, including BGP, EIGRP, MPLS and IPSec.
• 7 years designing and implementing secure enterprise wireless with Cisco Wireless LAN Controllers (including WLC 5520 and 9800) and EAP-TLS or PEAP.
• 7 years configuring, managing and troubleshooting Cisco Identity Services Engine (ISE), including TACACS, RADIUS, rules, policy sets, posture, and authentication and authorization for wired and wireless networks.
• 7 years configuring, managing and troubleshooting ExpressRoute connections to Microsoft Azure.
• 5 years with network monitoring and management tools such as SolarWinds and Cisco DNA Center.
• 5 years with Cisco VoIP infrastructure, operations and IVR technologies.
• 3 years with Managed Trusted Internet Protocol Service (MTIPS) and public IP infrastructure.
• 2 years of general Windows Server experience, including Active Directory, DNS and DHCP.
• Must live within commuting distance of Chicago and work on site., * Active CCIE, strongly preferred.
• Experience leading other network engineers.
• Associate degree or higher., We provide reasonable accommodation to qualified individuals with disabilities, for pregnancy-related limitations, and for sincerely held religious beliefs, as required by law. Qualified applicants must be able to perform the essential functions of the position, with or without reasonable accommodation. To request an accommodation during the application or interview process, contact csfaustin@icallidus.com.

On site, full time, at the agency’s office in downtown Chicago, IL. This position is not remote or hybrid, and you must live within commuting distance of Chicago. Your 8-hour workday falls within the agency’s core hours of 6:00 a.m. to 6:30 p.m. Central time, Monday through Friday, except federal holidays. You are expected to be on call for after-hours emergencies unless you are on approved leave.

Pay and benefits

Pay range: $170,000 to $195,000. The salary offered within this range will depend on factors such as experience, skills and qualifications for the role.

Benefits: 10 days of paid time off and 11 paid holidays per year.

Conditions of employment

• This position supports an existing Government contract. The current period of performance runs through July 16, 2027, and the Government may extend it by option through July 16, 2029. Continued employment depends on the Government continuing to fund the work.
• This is a Key Personnel position. The Government reviews and approves the person selected before they start, so your resume and certifications will be shared with the Government for that purpose.
• After a conditional offer of employment, you will need to complete a federal background investigation for a public trust position and receive a favorable or interim determination before your start date, and obtain an HSPD-12 Personal Identity Verification (PIV) card.
• Before you access Government systems, you will need to complete security and privacy awareness training and any role-based security training, and sign a nondisclosure agreement covering Government data. You will be expected to keep required certifications current.
• Security clearance: you do not need a clearance to apply. A public trust determination is required, and we will start that process after a conditional offer., Know your rights under federal equal employment opportunity law: www.eeoc.gov/poster

Pay: $170,000.00 - $195,000.00 per year

Benefits:

• Paid time off

iCallidus, Inc. is a small business federal IT contractor. We are hiring a Lead Network Engineer for the IT support team at a federal agency in downtown Chicago. You will lead the design, operation and troubleshooting of an enterprise Cisco network: LAN, WAN, firewalls, enterprise wireless, network access control and ExpressRoute connections to Microsoft Azure.