Network Administrator

Trowbridge and Trowbridge (T&T) is seeking a results-oriented, self-motivated network administrator who will be assigned as the primary technical contact for maintaining VPN remote access services using Cisco technologies in combination with open source software and Linux Servers in support of the Department of Energy (DOE) in its Germantown, MD facility.

The administrator will configure and maintain Cisco ASA 5500-series VPN and Firewall appliances, Cisco IOS VPN Routers and Linux Servers. The administrator will update and maintain Web applications using Apache, PHP, and MYSQL. The administrator will develop scripts to automate user account provisioning, run backup jobs, generate reports and process event data from network devices.

This position is responsible for the operation and maintenance of VPN and infrastructure services and must ensure each change to the environment is clearly documented, to include creating and updating all related standard operating procedures, interconnection agreements, drawings, and IP Addressing assignments.

Job Requirements:

• Must have 1-3 years experience supporting network services, coordinating with vendor technical support, escalating user trouble tickets, and interfacing with customers at all levels.

The ideal candidate will have hands-on technical experience working with:

• VPN technologies (IPSEC, SSL VPN, WebVPN, AnyConnect, DMVPN, etc)
• Configuring network services using open source technologies on Linux Servers
• Supporting nationwide and campus networks as a member of a 24x7x365 network and/or security operations team.
• Web application development using the LAMP stack. Must have proficiency with PHP and/or Perl Scripting to maintain existing Web application interfaces associated with VPN services, automating configuration changes, parsing log data from VPN appliances and Routers, generating reports from RADIUS accounting information stored in a MYSQL database, etc.
• Must have an understanding of VPN-specific troubleshooting methods, IPSEC encryption protocols, and Linux system administration tasks.
• Knowledgeable in application transport and network infrastructure protocols (SSL/TLS, DNS, DHCP, WINS, NTP, FTP, HTTP, SMTP, CIFS, LDAP, and Microsoft AD), and possess an understanding of how to support these applications/protocols when accessed through VPN and Firewall appliances.
• Maintain all VPN service documentation, to include updating the system security plan, coordinating with field sites and other agencies to renew interconnection agreements for site-to-site VPN connections, and updating end-user documents such as VPN installation directions and online FAQ.
• SLA and usage reports. Generate monthly VPN reports using existing procedures and update those procedures as needed. Attend weekly meetings with the customer and provide status updates regarding VPN service delivery.
• Web design skills and the ability to generate graphics for Web based applications is a big plus.
• Experience supporting Cisco wireless access points, Switches, Routers, and having an understanding of IEEE 802.1x and Network Access Control (NAC) is a plus.
• Past experience as a desktop hardware technician and/or sys-admin for Microsoft Windows is a plus.
• In addition to the successful candidate's primary focus supporting VPN services, this position will be called upon as a backup to the other members on the network support team.
• Leverage network management software to identify security events, fault detection, correlation of log events, performance metrics, and generate reports to support specific service level requirements.
• Configure Cisco Switches, Routers, Firewalls and Linux Servers in accordance with standard operating procedures.
• Develop documentation to improve current network operating procedures. Create and update topology diagrams and associated documentation for network applications, site networks and security enclaves. Contribute to the development of system security plans and certification and accreditation efforts.
• Experience working in a remotely administered lights-out environment is preferred, where equipment is deployed pre-configured and out-of-band access via modem and serial consoles is used when needed for troubleshooting and problem determination.

The successful candidate will demonstrate self-initiative and be able to operate without supervision. Must have strong time management, multi-tasking, organization and administrative skills and must be highly proficient with Visio, Project, Word, Excel, PowerPoint, and Outlook.

As part of the selection process, the candidate must demonstrate excellent verbal and written communication skills, with fluency in English equivalent to a fluent speaker.

Must have knowledge of VPN, Perl, PHP, Red Hat Linux, FreeRADIUS, Radiator RADIUS, RSA SecurID, Apache, MYSQL, Oracle, Cisco IOS Routers, Cisco ASA Firewalls, TCP/IP, IPSEC, SSL

Past employment supporting the US Federal government and/or military experience is a plus.

Must be flexible and able to work nights, weekends and holidays as needed to support Planned and unplanned network maintenance and troubleshooting events. The successful candidate is expected to be available on-call 24x7. Upon hire, the engineer will be issued a Blackberry and VPN access to allow rapid response to network events whenever the network operations center escalates a problem requiring Tier-3 support. Ability to travel as needed, primarily within Maryland and the Washington DC metro area.

Physical Demands:

• The successful candidate will work in an IT data center (raised-floor) environment and be able to lift up to 50 pounds.

T&T is an Equal Opportunity Employer.