Network and Systems Lab Engineer, Mid

Booz Allen Hamilton•Aberdeen Proving Ground, MD

13d•$61,900 - $141,000•Onsite

About The Position

A well-designed network is critical to move data and enable SATCOM to achieve their missions, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need a network engineer like you who knows how to develop the exact network for the DoD’s needs. As a network engineer on our team, you’ll use your skills in network design and architecture, system interoperability, OSI model, network transport layers, multi-protocol label switching, gateway protocol, virtual routing, and forwarding to help support the nation’s defense and respond to evolving adversaries. You’ll upgrade or develop enterprise-wide infrastructure, troubleshoot and resolve complex network issues, analyze current working infrastructures, and increase security, reliability, and availability for mission-critical network systems. You’ll apply your knowledge in routing and switching, integration of encryption gear, network design and architecture, system interoperability, IP engineering, network transport layers, multi-protocol label switching, gateway protocol, virtual routing, and forwarding as you join our team of problem-solvers to help the DoD evolve and deploy new capabilities and technologies. Your knowledge of network protocols, equipment, emerging technology, and configurations will come in handy as you help optimize client operations and modernization. Using your experience in cryptographic equipment, cryptography, key management, software and hardware firewalls, Cisco hardware, Palo Alto firewalls, cloud migration, optical infrastructure networking, virtual routing and forwarding, and SolarWinds, you’ll serve as a trusted advisor to clients on mission-critical projects. Using your technical curiosity and knowledge of industry standards, you’ll make an impact on national security missions.

Requirements

3+ years of experience designing, deploying, configuring, and maintaining Layer 2 and Layer 3 switches, routers, and firewalls such as Cisco or FortiGate, enforcing network segmentation, and implementing Access Control Lists (ACLs) across core switching layers and perimeter boundaries
Experience installing, inspecting, and terminating Cat-6 and optical fiber cabling
Experience configuring and maintaining virtual networking constructs such as vSwitches, VLAN tagging, or SDN overlays, across multi-hypervisor architectures
Experience executing scheduled vulnerability assessments across FortiGate firewalls, Cisco switches, and endpoints, and compiling, analyzing, and presenting network health metrics and vulnerability trends for UCRN enclaves
Experience conducting quarterly DoD Security Technical Implementation Guide (STIG) compliance audits utilizing automated and manual assessment methods, and remediating findings to sustain lab authorization status, including collaborating with Information System Security Officers (ISSOs) and lab leads to maintain Authority to Operate (ATO) artifacts, risk assessments, and compliance documentation
Ability to drive technical documentation, infrastructure procurement, and day-to-day lab operational readiness
Ability to travel up to 25% of the time
Secret clearance
Bachelor's degree in STEM
IAT Level II Security+ and Cisco Certified Network Associate (CCNA), or CCNP Certification

Nice To Haves

Knowledge of VMware vSphere, vCenter, ESXi, Proxmox VE, or KVM
Knowledge of Windows Server 2019 or 2022, Windows 10 or 11 Enterprise, and RHEL, Rocky Linux, or Ubuntu
Knowledge of Microsoft Visio, SharePoint, ACAS or Tenable Nessus, SCAP Compliance Checker (SCC), and STIG Viewer
Top Secret clearance
Fortinet NSE 4 or higher, or VMWare Certified Professional (VCP) Certification

Responsibilities

Design, deploy, configure, and maintain Layer 2 and Layer 3 switches, routers, and firewalls such as Cisco or FortiGate, enforcing network segmentation, and implementing Access Control Lists (ACLs) across core switching layers and perimeter boundaries
Install, inspect, and terminate Cat-6 and optical fiber cabling
Configure and maintain virtual networking constructs such as vSwitches, VLAN tagging, or SDN overlays, across multi-hypervisor architectures
Execute scheduled vulnerability assessments across FortiGate firewalls, Cisco switches, and endpoints, and compile, analyze, and present network health metrics and vulnerability trends for UCRN enclaves
Conduct quarterly DoD Security Technical Implementation Guide (STIG) compliance audits utilizing automated and manual assessment methods, and remediate findings to sustain lab authorization status, including collaborating with Information System Security Officers (ISSOs) and lab leads to maintain Authority to Operate (ATO) artifacts, risk assessments, and compliance documentation
Drive technical documentation, infrastructure procurement, and day-to-day lab operational readiness