Workable
Network Engineer-536390
The U.S. Department of State (Department), Office of Inspector General (OIG) has a requirement for full-time Information Technology (IT) Management Networking and Security Services support. The purpose of the task order is to provide professional services personnel to provide quality, comprehensive IT support to the OIG in an effective and efficient manner with a vision to maintain effective and efficient IT operations commensurate with industry best practices, while ensuring the confidentiality, integrity, and availability of OIG data.
Job Duties:
Manages all components and aspects of OIGNet network, provides assistance and support as necessary for OpenNet and ClassNet networks
Manages routing, switching and firewall infrastructure for on-premises, co-location site and cloud environments
Supports existing and new implementations from an operational perspective
Designs, implements and supports new network and datacenter solutions such as voiceover-IP, IPv6, datacenter switches and routing
Monitors performance of network infrastructure and provides last tier troubleshooting support as necessary
Monitors availability of all applications, systems and networks per established SLAs
Monitors overall security posture of applications, systems and networks and takes immediate action to address identified issues
Implements and/or uses IT security tools to monitor and protect OIGNet network and all associated assets
Implements zero-trust network architecture concepts to always keep OIGNet network secure
Works with lead network engineer and datacenter manager to set priorities for projects and tasks
Guides junior engineers as necessary on topics related to OIG projects and tasks
Participates in team meetings, collaborates with other team members and teams on projects and tasks
Creates detailed network diagrams, as built, and standard operating procedure documents
Uses OIG ticketing system to resolve problem tickets
Interfaces with external entities such as IRM, other federal agencies and internet service providers to work on projects and troubleshooting efforts when necessary
Supports all FISMA A&A and continuous monitoring efforts for on-premise and cloud environments
Provides last tier support during normal business and after hours in critical network outage situations to provide quick resolution
Requirements
A bachelor’s degree in engineering or computer science or related IT field and ten years of experience in support of Windows/Linux/Unix operating systems, Cisco networking equipment and systems integration for classified and unclassified networks.
Experience in planning and executing systems engineering projects in support of system engineering life cycle development for classified and unclassified environments.
Strong problem solving, leadership and project management skills.
Proficiency with all aspects of Windows Server 2003, 2008 Active Directory Services.
Understanding of the Border Gateway Routing Protocol (BGRP) and Generic Routing Encapsulation (GRE).
Knowledge of CISCO routers and switches and networking technologies.
Experience with VPN encryption devices, such as Cisco routers, Cisco ASA’s and Nortel Connectivity.
Ability to troubleshoot network connectivity issues and resolve problems related to outages.
Ability to evaluate residing systems for network, system and security readiness as well as provide troubleshooting for application environment issues.
Additional desired qualifications include:
Eight years of experience with designing, installing and supporting routing, switching and
firewall equipment
Eight years of experience designing secure complex network solutions based upon requirements
Eight years of experience working with Cisco, Juniper and Ciena switches
Three years of experience with routing and switching protocols such as OSPF, BGP, HSRP, VRRP, spanning tree, various 802.1 protocols, trunking and traffic aggregation
Three years of experience working with Palo Alto firewalls, Panorama
Two years of experience working in Microsoft Azure cloud environment supporting and designing new solutions
Two years of experience working directly with internet service providers
Two years of experience with deploying or administering network configuration management solutions
Three years for experience designing and implementing fault tolerant solutions to eliminate single points of failure and make networks as resilient as possible
Experience supporting and managing enterprise wireless network solutions
Experience supporting federal agency networks and datacenters
Experience with implementing and using performance management and security management tools
Good understanding of requirements for federal agencies network such as trusted internet connections (TIC 3.0), DHS Binding Operational Directives, OMB Memorandums etc.
Knowledgeable about the zero trust networking technologies and hands-on experience with supporting solutions implementing this concept
Experience working with and implementing IPv6 addressing and networking for the entire networks
Familiarity with DHS CDM program implementation and/or support
Strong knowledge and deep understanding of the OSI network stack and hands-on experience with layer 2 and 3 concepts
Strong knowledge and deep understanding of network security concepts and implementation to protect federal networks
Strong knowledge and deep understanding of protocols such as DNS, DHCP, HTTP, SMTP
Understanding of and experience with ITIL, CMMI, and/or PMP processes and implementation.
Other Duties:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
Arlington, VA, USA
Negotiable Salary
Favourites
Share
Show map
