GAIT Network Engineer

Responsibilities  The Network Engineer will be responsible for GAIT mission planning, engineering, implementation, cyber security and troubleshooting as required to support users requiring GAIT services to include RHNs down to the Tactical-Edge. The Network Engineer duties will also include managing various components of the infrastructure, including wired and wireless routers, switches, Cisco Voice over IP (VOIP) components, appliance based specialty networking or system hardware, configuration of alert management systems on other managed infrastructure components such as service desk tools, and monitoring and alerting infrastructure which serves as the nexus of the GAIT incident and alter management system. The candidate will create/review technical designs and make recommendations to the technical lead of the project regarding the security aspects of the solutions.

Other duties include but are not limited to;

• Bring an Innovative approach to the network field of expertise on a team.
• Participate in the evaluation and recommendation of new security products, maintain knowledge of emerging cyber technologies for application to the enterprise.
• Plan, Design, and Implement emerging technologies for added capabilities while also cutting costs.
• Manage projects as a technical lead, possibly overseeing other engineers.
• Brief senior leaders within the government on current projects and decision briefs for roadmap emerging technologies.
• Document requirements and properly manage updates & deployments using existing change management processes.
• Participate in the identification and resolution of complex infrastructure problems (Tier 3 support) utilizing structured trouble-shooting tools and techniques.
• Provide cross-training and mentoring to existing engineering personnel in various fields.
• Shift work may be required

The Network Engineer should have a working knowledge of the topics listed below or have the potential to learn the required knowledge in a reasonable timeframe.

They are listed in priority.

Routing functions:

• Load configurations on router/switches (CCNA R&S)
• Setup, troubleshoot, and understand Border Gateway Protocol (BGP) (CCNP R&S)
• Setup, troubleshoot, and understand Open Shortest Path First (OSPF) (CCNP R&S)
• Setup, troubleshoot, and understand Dynamic Multipoint Virtual Private Network (DMVPN) (CCNP R&S)
• Setup, troubleshoot, and understand Multicast (CCNP R&S)
• Setup, troubleshoot, and understand switch technologies (CCNP R&S)
• Setup, troubleshoot, and understand Policy Based Routing (PBR) (CCNP R&S)
• Setup, troubleshoot, and understand Multi-Protocol Label Switching (MPLS) (CCNP SP)
• Setup, troubleshoot, and understand MPLS Layer 3 VPN (L3VPN) (CCNP SP)
• Setup, troubleshoot, and understand MPLS Layer 2 VPN (L2VPN) (CCNP SP)
• Setup, troubleshoot, and understand various SP technologies i.e; MVPN, LDP, MP-BGP (CCNP SP)

NetOps

• Setup, troubleshoot, and understand the VMware vSphere 6.0 and above (VMware VCP-DCV)
• Setup, troubleshoot, and understand the various NetOps applications, such as: SNMPc, Solarwinds ORION, Radius, and TACACS (Cisco ISE)
• Information Assurance (IA) o Load IOSs on Cisco firewalls/IPSs (CCNA Security)
• Setup, troubleshoot, and configure Cisco firewall/IPS configurations (CCNP Security)
• Understand routing and traffic flows in the RHNs, and downrange assets (CCNP Security/CCNP R&S)
• Setup, troubleshoot, and configure Cisco Security Manager (CSM) (CCNP Security)
• Setup, troubleshoot, and configure Palo Alto virtual firewalls
• Setup, troubleshoot, and configure Palo Alto’s Panorama firewall management tool

Voice

• Create trunks (CCNA Voice)
• Build call managers (CCNP Voice)
• Create route patterns (CCNA Voice)
• Setup and operate the Voice Gateway Routers (VGR) (CCNP Voice)
• Understand call setup and call traffic flow (CCNP Voice)

Communications Security

• Set up and operate KG-175A and KG-175D model TACLANEs and/or similar encryption devices

Basic Qualifications:

• Bachelor's degree with 4 or more years of related experience, or Master's degree with 3 or more years of experience. Additional years of directly related experience can offset the degree requirements.
• Must have active DoD Secret security clearance
• An in-depth knowledge of IP networking and processes is mandatory.
• The candidate must possess knowledge that is on-par with a Cisco Certified Network Professional (CCNP) certification, but the certification is not a requirement for the position.
• Experience managing a large enterprise network
• Experience including LAN and WAN technologies based on Cisco hardware and platforms
• Experience and expertise in system architecture, planning, design, engineering, network management, operations and support of medium to large multi-services enterprise IP network which cover a regional to global geography
• Strong knowledge of DoD IA/RMF and IT regulations and guidance
• Strong knowledge of routing, switching, VPNs, PKI and CSfC
• Hands-on experience with McAfee products such as ESM, email and web gateway.
• Hands-on experience with Windows Server 2012R2, Windows 7/10, REL 6/7
• Excellent verbal and written communications skills
• Must be able to travel up to 25% if required
• Willingness to work flexible hours
• Shift work may be required
• “On Call” may be required