Network Integrator CBP

Sherpa 6•Ashburn, VA

2d•Onsite

About The Position

The Network Integrator supports the U.S. Customs and Border Protection (CBP) Operational Technology Operations Center (OTOC) and the build-out, integration, testing, deployment, and sustainment of the Office of Information and Technology (OIT) ISS OTOC. This is a full-time onsite position supporting network engineering and integration, Watchtower Mobile Device Management (MDM), laboratory testing, and fielding of operational technology during an assigned 8-hour day shift. The Network Integrator designs, configures, integrates, validates, troubleshoots, documents, and sustains network connectivity required to support OT and tactical systems across laboratory, enterprise, edge, and field environments. The position works with routers, switches, firewalls, VPNs, wireless networks, network services, cloud connectivity, identity and certificate services, and endpoint technologies to establish secure and reliable end-to-end communications. The position provides hands-on network support for Watchtower and associated Android, Windows, Linux, iOS, radio, sensor, wearable, and tactical endpoints; builds representative lab environments; performs integration and acceptance testing; supports deployment readiness and technology fielding; and troubleshoots complex network and interoperability issues. The Network Integrator coordinates with systems integration, cybersecurity, engineering, OTOC operations, program leadership, vendors, and government stakeholders to transition validated technology into operational use.

Requirements

Associate's or Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, Systems Engineering, Communications, Business Technology, or a related field; equivalent directly relevant experience may be substituted for a degree.
5+ years of progressively responsible experience in network engineering, network integration, network operations, systems integration, operational technology, lab testing, technical fielding, or a related technical role.
Demonstrated hands-on experience configuring and troubleshooting routers, switches, firewalls, VPNs, wireless networks, and enterprise network services.
Strong knowledge of TCP/IP networking, IPv4/IPv6, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPN technologies, firewall concepts, and network segmentation.
Experience using packet analysis, network monitoring, logging, command-line, and diagnostic tools to troubleshoot connectivity and performance issues.
Experience integrating network services with Windows, Linux, mobile endpoints, identity services, certificates, cloud platforms, and/or operational technology.
Experience building or supporting network lab/test environments and executing structured integration, interoperability, regression, performance, or acceptance testing.
Experience preparing, configuring, validating, and fielding network-enabled technology into operational or customer environments.
Demonstrated ability to troubleshoot multi-vendor and cross-domain technical issues and coordinate resolution across network, systems, cybersecurity, application, and vendor teams.
Ability to create and maintain network diagrams, IP plans, configuration records, implementation procedures, test plans, deployment checklists, troubleshooting guides, and knowledge articles.
Strong written and verbal communication skills and the ability to communicate effectively with technical teams, program leadership, vendors, and government stakeholders.
Ability to work full-time onsite during an assigned 8-hour day shift and support fielding/deployment travel as mission requirements dictate.
Strong working knowledge of: Cisco or comparable enterprise routing and switching technologies, Enterprise firewall and VPN technologies, TCP/IP, IPv4/IPv6, VLANs, routing protocols, NAT, DNS, DHCP, and network segmentation, Wireless networking and mobile/edge connectivity, Windows Server and Desktop Operating Systems, Linux Operating Systems, Android and iOS Mobile Platforms, Mobile Device Management (MDM) Solutions, Active Directory and LDAP Administration, Microsoft Azure Cloud Services, AWS Cloud Services, Virtualization Technologies (Hyper-V, VirtualBox, VMware)
Knowledge and experience supporting Tactical Awareness Kit (TAK) software applications, including: TAK Server Administration, ATAK/WinTAK Client Configuration, TAK Infrastructure Deployment and Support, Tactical Data Distribution and Network Integration
Experience with: Public Key Infrastructure (PKI), X.509 Certificates, Certificate Authorities (CA), Client and Server Certificate Lifecycle Management, Secure Communications Architectures

Nice To Haves

Experience supporting Watchtower or a similar MDM, situational awareness, mobility, or operational technology platform.
Experience integrating and fielding network technologies for government, public safety, defense, border security, tactical, or other mission-oriented environments.
Experience with enterprise network monitoring and management platforms, packet capture/analysis tools, and centralized logging solutions.
Experience with dynamic routing protocols, high availability, redundancy, failover, QoS, and network performance analysis.
Experience supporting cloud networking, hybrid connectivity, virtual networks, security groups, gateways, and related Azure or AWS networking services.
Experience supporting disconnected, edge, tactical, cellular, satellite, or limited-connectivity environments.
Experience with network automation, scripting, configuration templating, or infrastructure-as-code concepts.
Experience with configuration management, release/change management, and transition-to-operations processes.
Experience developing or executing formal network test plans, test cases, acceptance criteria, and test reports.
Relevant technical certifications such as Cisco CCNA/CCNP, CompTIA Network+/Security+, Juniper, Palo Alto Networks, Fortinet, Microsoft Azure, AWS, or comparable certifications.

Responsibilities

Design, configure, integrate, test, troubleshoot, and document network solutions supporting OTOC, Watchtower, operational technology, and tactical systems.
Configure and support routers, switches, firewalls, VPN gateways, wireless infrastructure, and associated network services in lab and operational environments.
Support IPv4/IPv6 addressing, subnetting, VLANs, routing, switching, NAT, DNS, DHCP, VPNs, access control, and secure network segmentation.
Integrate network connectivity across on-premise, cloud, edge, mobile, and disconnected or limited-connectivity environments.
Analyze network paths and dependencies to identify connectivity, latency, packet loss, routing, name-resolution, firewall, VPN, or configuration issues.
Use packet captures, logs, monitoring platforms, command-line tools, and other network diagnostic methods to isolate and resolve complex problems.
Develop and maintain network diagrams, IP address plans, interface definitions, configuration baselines, port/protocol matrices, build records, and implementation documentation.
Support network configuration management, backups, version control, standardization, and repeatable deployment practices.
Review proposed network changes for dependencies, operational impacts, security considerations, validation requirements, and rollback needs.
Provide network integration and connectivity support for the Watchtower MDM platform and supported OT and tactical devices.
Validate network requirements for Android, Windows, Linux, iOS, radios, sensors, wearables, and other supported endpoints.
Support device enrollment, provisioning, policy delivery, certificate distribution, remote management, compliance reporting, and over-the-air updates by ensuring required network paths and services are available.
Validate Watchtower communications across enterprise, wireless, VPN, cloud, edge, offline, and disconnected-use scenarios.
Troubleshoot connectivity between Watchtower services, managed endpoints, identity services, certificate infrastructure, cloud resources, and other integrated systems.
Support secure communications architectures and certificate-based connectivity using PKI, X.509 certificates, Certificate Authorities, and client/server certificate lifecycle processes.
Build, configure, and maintain representative network lab environments used to evaluate new technologies, network configurations, devices, software releases, and integration changes before operational fielding.
Develop and execute network integration, connectivity, interoperability, performance, failover, regression, and operational acceptance test procedures.
Reproduce field network issues in the lab, collect diagnostic data, isolate root causes, validate fixes or workarounds, and document results.
Validate routing, firewall rules, VPN connectivity, DNS/DHCP services, certificates, wireless connectivity, bandwidth requirements, and endpoint communications before deployment.
Test network behavior under representative operational conditions, including degraded, edge, intermittent, or disconnected connectivity when applicable.
Document test objectives, topology, configurations, procedures, results, defects, limitations, corrective actions, and deployment-readiness findings.
Coordinate test events with Systems Integrators, engineering, cybersecurity, OTOC support personnel, vendors, and government stakeholders.
Support planning, staging, configuration, validation, deployment, and fielding of network-enabled technologies to operational locations.
Perform site and deployment readiness assessments to identify network connectivity, addressing, routing, firewall, VPN, wireless, power, rack/space, and other infrastructure dependencies.
Prepare network configurations, deployment packages, diagrams, implementation plans, test checklists, validation procedures, and rollback procedures.
Perform pre-deployment verification of network devices, firmware/software versions, configurations, certificates, accounts, connectivity, and external dependencies.
Provide onsite or remote network support during installation, activation, acceptance testing, and transition to operations.
Troubleshoot fielding issues and coordinate corrective actions with systems integration, engineering, cybersecurity, carriers/service providers, vendors, and OTOC support teams.
Capture as-built network configurations, fielding results, lessons learned, known issues, and follow-on actions.
Support transition of fielded technology to OTOC operations by providing network documentation, troubleshooting guidance, knowledge transfer, and escalation procedures.
Monitor and assess network health, availability, utilization, performance, and connectivity using approved tools and methods.
Support Tier 2/Tier 3 troubleshooting for network-related incidents and problems requiring advanced analysis, lab reproduction, or engineering coordination.
Support incident, problem, and change management activities associated with network infrastructure, integrated systems, releases, deployments, and configuration changes.
Assist with root cause analysis for recurring or high-impact network issues and document corrective and preventive actions.
Coordinate with cybersecurity personnel to implement approved network security controls, segmentation, access restrictions, secure protocols, and remediation actions.
Support network device lifecycle activities, including configuration, upgrades, patching, firmware updates, backup/restore, replacement, and decommissioning in accordance with approved processes.
Maintain technical documentation, SOPs, troubleshooting guides, knowledge articles, network standards, and operational procedures.
Provide technical briefings, demonstrations, knowledge transfer, and hands-on training to OTOC support personnel and government stakeholders as required.