Network Engineer (Cloud)

By Light Professional IT Services LLC•Alexandria, VA

4d•$50,000 - $65,000

About The Position

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and IT customers worldwide. A hardworking, competitive type that is driven to succeed with a natural sense of urgency. You are a self-starter with a reputation for being an effective team player, who proactively looks to improve and add efficiency to current processes. You exercise judgment in the decision-making process in order to provide consistent customer service. You are highly proficient in problem solving and can follow a systematic troubleshooting approach. The ideal candidate will be involved with the creation of procedures, identifying, troubleshooting and resolving problems, and assuring that requirements are met for new and existing systems in support of engineering and installation. This position provides hands on technical support and managerial direction for the global network infrastructure of a large Federal Government agency. Additionally, this individual should have experience with the setup and maintenance of VPN tunnels, vLAN configurations, wireless network configurations, IPv6 and IPv4 (including complex sub-netting) and network security (Cisco ASA Firewalls, ACLs, IPsec, and other encryption methodologies).

Requirements

2+ years of network administration
Experience with enterprise class Arista routers and switches, installation, configuration, hardware/software updates and patching, advanced troubleshooting skills, including the ability to capture and analyst packet level data (i.e. Wireshark PCAPS)
Experience with network management tools such Arista CloudVision
Experience with network monitoring tools, e.g., RiverBed, NetFlow, TAPs and SPANs
Experience with VPN’s and other remote access applications
Experience with wireless network configurations and installation
Knowledge of Switches, Routers, Firewalls, LAN, WAN, TCP/IP, UDP, QoS
Must demonstrate advanced understanding of TCP/IP including layer 2/3 VLANs and routing protocols such as BGP, EIGRP, OSPF, RIP
Ability to express complex technical concepts effectively, both verbally and in writing
Must be available for weekend and evening work if required
Must be able to document in detail all implementations and projects

Nice To Haves

Cloud or networking certifications (e.g., AWS Advanced Networking – Specialty, Azure Network Engineer Associate, or Cisco CCNP or equivalent)

Responsibilities

Assist in configuring and maintaining multi-cloud VPCs, subnets, route tables, and security groups under senior engineer supervision.
Support the monitoring and troubleshooting of multi-cloud network connectivity issues using CloudWatch, VPC Flow Logs, and other native tools.
Aid in the setup of site-to-site VPNs and Direct Connect links between on-premises infrastructure and multi-cloud environments.
Perform routine audits of network access control lists (ACLs) and security group rules to ensure compliance with organizational policies.
Collaborate with cloud engineers to support hybrid network architecture and ensure consistent network performance across multi-cloud and on-prem environments.
Document multi-cloud network configurations, changes, and topology diagrams for operational and compliance purposes.
Assist in managing Elastic IP addresses, NAT gateways, and internet gateways to support scalable multi-cloud deployments.
Participate in the implementation of AWS Transit Gateway configurations to optimize inter-VPC connectivity.
Provide Tier 1 support for cloud network incidents and escalate complex issues to senior network or cloud engineers.
Support the deployment and testing of network automation scripts using AWS CLI, CloudFormation, or Terraform under guidance.
Proficient in using network management and monitoring platforms such as Arista CloudVision, Riverbed, NetFlow, TAPs, SPANs, AWS Network Manager, Azure Network Watcher, or equivalent third-party solutions for visibility, diagnostics, and topology tracking.