Sr. Network Engineer/Project Mgr w/PMP Cert

SR. NETWORK ENGINEER/PROJECT MANAGER
W/PMP CERTIFICATION (REQUIRED)

(POSITION REQUIRES U.S. CITIZENSHIP)
Active DoD SECRET clearance (A PLUS)

POSITION SUMMARY:

The Senior Network Engineer will participate in the development and maintenance of an enterprise network o n a project team supporting a major Federal Government Agency. We are seeking a results-oriented, self-motivated network engineer who will be responsible for securing and maintaining a nationwide Wide Area Network (WAN) that interconnects forty U.S. government field sites. The engineer will deploy and provide ongoing support for Cisco firewalls and routers. All traffic crossing the WAN must remain encrypted using IPSEC between the routers. Firewall and intrusion prevention policies need to be applied and maintained based on site-specific requirements. This engineer is responsible for the operation of the WAN and must ensure each change to the environment is clearly documented, to include creating and updating all related engineering documents, drawings, and IP addressing assignments.

QUALIFICATIONS

Education: Bachelor degree in Information Technology, or Engineering.

Experience: Must have ten (10 ) to fifteen (15) years experience; or an equivalent combination of education and work experience. Must have experience with Cisco IOS Routers, Cisco PIX Firewalls, Cisco ASA Firewalls, Perl, Red Hat Linux, CentOS. My SQL Web Apps, Bluecoat, Microsoft Windows, TCP/IP, VPN, IPSEC, VRF, EIGRP, OSPF, HSRP, T-1and T-3.

Required Skills:

• The ideal candidate will have experience troubleshooting, implementing, and documenting nationwide and campus networks built using Cisco network devices (Catalyst 2950/3560/3750/4500/6500 switches, Cisco 2600/2800/3800/7200 Routers running IOS 12.x, and Cisco PIX and ASA 5500-series firewalls).
  
• Must have experience modifying Firewall rule sets, studying network traffic flows using products such as Wireshark to reverse-engineer the required Firewall rules to lock down an application, and troubleshooting Firewall problems in an enterprise or service provider environment under short time constraints involving complex network application flows between multiple hosts spanning multiple firewalls and different geographic locations.
  
• Must have recent hands-on technical experience installing, configuring, documenting, and providing ongoing support for Cisco PIX and/or ASA 5500-series firewalls, and Cisco Routers at multiple customer sites. Must demonstrate a strong understanding of TACACS, RADIUS, Cisco PIX/ASA 7.x and Cisco IOS 12.x command syntax.
  
• Must have recent experience configuring routing protocols, applying route filters and troubleshooting enterprise WAN and/or service provider Internet edge and backbone Routers running EIGRP and OSPF.
  
• Must have an expert understanding of the TCP/IP stack and 3-5 years experience supporting LAN and WAN networks with hosts running Windows XP, Windows Server 2003, Linux, and Solaris. Must have a strong understanding of application transport and network infrastructure protocols (SSL/TLS, DNS, DHCP, WINS, NTP, FTP, HTTP, SMTP, CIFS, LDAP, IP Video and Microsoft AD) and their relationship to end-user applications.
  
• Must have 1-3 years experience coordinating with Cisco TAC, nation-wide telecommunication carriers, tracking and escalating trouble tickets, and interfacing with customers at all levels.
  
• Must have excellent problem solving skills and a solid understanding of how to troubleshoot connectivity and performance issues that involve firewalls, routers, network applications, and WAN circuits (T-1, T-3, OC-3, ISDN, HDLC, ATM, Frame Relay, and MPLS).
  
• Experience configuring and troubleshooting GRE and IPSEC encrypted tunnels between multiple Routers and firewalls a plus. Experience working with VRF, DMVPN and mGRE preferred.
  
• Proficiency with the Perl Scripting language is preferred for automating configuration changes, parsing log data from firewalls and routers, generating reports, detecting network traffic anomalies, etc.

Past experience as a sys-admin for Linux and Windows Servers is a plus.

Other Job Functions:

In addition to the successful candidate's primary focus supporting the WAN, this position will be called upon as a backup to the MAN and LAN network support staff.

• Minimum 1-3 years experience supporting switched LAN networks (Fast Ethernet and Gigabit Ethernet) with an intimate knowledge of Spanning Tree Protocol (STP), VLAN Trunking Protocol (VTP), 802.1q Trunking, and Etherchannel. Experience with port security, 802.1x, and Network Access Control (NAC) a plus.
  
• Experience working in a remotely administered lights-out environment is preferred, where equipment is deployed pre-configured and out-of-band access via modem is used when necessary during circuit problem determination.
  
• Develop documentation to improve current network operating procedures. Create and update topology diagrams and associated documentation for each site network and security enclave.
  
• Experience with the development and creation of NIST C&A documentation is a plus.
  
• Install and operate open source software to perform network monitoring. Operate network and security management software to identify security events, fault detection, correlation of log events, performance metrics, and generate reports to support specific service level requirements.
  
• Must be flexible and able to work nights, weekends and holidays as needed to support planned and unplanned network maintenance and troubleshooting events. The successful candidate is expected to be available on-call 24x7. Upon hire, the engineer will be issued a Blackberry and VPN access to allow rapid response to network events whenever the network operations center escalates a problem requiring Tier-3 support. Ability to travel as needed, primarily within Maryland and the Washington D.C. metro area.
  
• The successful candidate will demonstrate self-initiative and be able to operate without supervision. Must have strong time management, multi-tasking, organization and administrative skills and must be highly proficient with Visio, Project, Word, Excel, PowerPoint, and Outlook.
  
• Experience with developing project plans and WBSs.
  
• As part of the selection process, the candidate must demonstrate excellent verbal and written communication skills.

US Citizen (REQUIRED). Must be able to obtain a DOE Q Clearance.