IP Network Engineer

Global Enterprise Services•Fort Meade, MD

About The Position

GES is seeking an IP Network Engineer to support its DISA program team in Fort Meade, Maryland. The role provides end-to-end engineering solutions for DISN projects and leads the planning and implementation of solutions across multiple technologies and platforms. The engineer supports technical planning, analysis, engineering, and testing for DISN initiatives, provides technical recommendations, and helps deliver integrated solutions for mission success. The position includes developing and validating network architecture, supporting its initial implementation and lifecycle engineering, and providing technical expertise for the design, testing, evaluation, and deployment of advanced, large-scale DoD networks. The engineer works on MPLS services for the DISN, including L3VPN, L2VPN, VPLS, and Carrier Supporting Carrier, and supports testing and implementation of the DMZ COI VPN. The role also involves network security analysis and recommendations, crypto testing and troubleshooting, configuration management, documentation, and Tier III support.

Requirements

Bachelor’s degree in a technical discipline such as engineering or information technology.
At least 5 years of experience.
Large enterprise or DoD IP design experience.
Experience running BGP/MP-BGP across multiple autonomous systems and MPLS routing protocols.
Extensive router regression testing experience with Cisco ASR9K routers, including ASR9010 and ASR9006.
Strong experience with BGP, MPLS/RSVP, OSPF, IS-IS, multicast, Layer 2/Layer 3 VPN, and CsC.
Working knowledge of Microsoft Office tools, including PowerPoint, Word, and Excel.
Excellent verbal and written communication, leadership, and interpersonal skills.
Secret clearance required.
IAT Level 2 certification required by the project, or willingness to obtain it within 3 months of joining.

Nice To Haves

DoD and/or government program experience; DISA experience is a plus.
Experience with network test equipment or traffic generators such as IXIA, Spirent Test Center, Smartbits, and Agilent N2X.
CCNP, JNCIP, or equivalent routing and switching experience.
Experience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, and SONET.
Working experience with network security products such as firewalls, IDSs, and SIEMs, and with SNMP.

Responsibilities

Analyze and study complex system requirements.
Design software tools and subsystems to support software reuse and domain analyses, and manage their implementation.
Develop and validate system architecture; support initial implementation and lifecycle engineering of network architecture.
Support Quality of Service (QoS) policies, requirements, and testing.
Provide technical expertise for design reviews, lab testing and test reports, implementation plans, and deployment of advanced, large-scale complex DoD networks.
Support insertion of emerging technologies, features, and capabilities.
Support mission partners in satisfying interoperability requirements.
Provide documentation for Configuration Control Boards (CCBs) and supervise software configuration management.
Provide Tier III support and oversee Tier III support engineers.
Conduct market research to identify products that meet requirements.
Implement DISN MPLS service offerings through IP Transport Provider Edge (IPTPE), including L3VPN, L2VPN, VPLS, and CsC.
Test and support implementation of the DMZ COI VPN, which separates NIPRNet traffic from Mission Critical Community of Interest traffic using MPLS L3VPN.
Configure, test, and troubleshoot cryptographic systems using various protocols.
Provide technical security expertise in the design, testing, evaluation, and deployment of advanced DoD networks.
Review DoD agency security requirements for NIPRNet protection; assess current architecture and propose and analyze potential solutions.
Review security threats to DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology, and determine and implement countermeasures in accordance with established policies, regulations, and directives.
Deliver router and firewall test plans and test reports; prepare field recommendations and configuration guides.