Senior Network Engineer

Amentum•Fort Meade, MD

3d•$200,000 - $240,000•Onsite

About The Position

Amentum is seeking a Senior Network Engineer to support DISA and the Department of Defense’s critical IT capabilities program in Ft. Meade, Maryland. The role contributes to engineering, assembling, integrating, deploying, and sustaining an enterprise IT solution supporting national security and intelligence missions. The Senior Network Engineer works as an autonomous senior-level contributor and collaborates with engineering teams in a dynamic environment, adapting to new products and processes while addressing complex technical problems. The role designs, builds, and troubleshoots network and network security architectures; provides engineering escalation support for network operations; and works with Information Assurance Security Engineers to ensure designs satisfy security controls and maintain enclave Authority to Operate. The position also develops technical and implementation documentation for integration, deployment, and sustainment. Work takes place daily in a SCIF, with possible periods in a datacenter. The schedule is eight hours per day, Monday through Friday, and travel may be required up to 20%. An active Top Secret clearance with SCI eligibility is required. Employment is contingent on successful completion of drug screening.

Requirements

Cisco Certified Network Professional (CCNP) certification.
DoD 8570.01-M IAT-II baseline certification requirements.
At least 10 years of network engineering experience, including 3 years of network design, architecture, and implementation experience.
Bachelor’s degree in an IT-related field, or an additional five years of Network Engineering experience.
Active Top Secret clearance with SCI eligibility.
Experience designing, configuring, troubleshooting, and testing IS-IS and/or OSPF networks.
Experience with MP-BGP underlays and overlays.
Experience with MPLS networks, including RSVP-TE, LDP, and SR-MPLS.
Experience with complex routing policies and protocol redistribution concepts and strategies.
Experience with DMVPN and/or SD-WAN.
Experience with Cisco Firepower and Palo Alto firewalls, including Firepower Management Console and Panorama management software.
Experience deploying and testing Cisco Identity Services Engine (ISE).
Experience deploying and testing new circuits and fault-isolating issues to customer-edge equipment, demarcation points, and/or carriers.
Experience with network security technologies including SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies, and endpoint security.
Experience with Microsoft Office applications such as Excel, Word, Outlook, and SharePoint.
Ability to work independently and as part of a team in a dynamic environment, including participation in complex design sessions.
Ability to travel up to 20%.
Successful completion of the required drug screening process.

Nice To Haves

Extensive experience designing and building network and network security architecture across underlay and overlay partitions to balance customer experience with security policy compliance.
Extensive experience designing, building, and troubleshooting Palo Alto and/or FMC/FTD next-generation firewalls performing deep packet inspection (DPI).
Extensive experience designing, building, and troubleshooting ISE and/or other endpoint security appliances.
Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk, and StealthWatch.
Experience automating repetitive tasks using tools or scripts such as Python and TCL.
Extensive experience with Cisco routing, switching, and network configurations underlying IP telephony systems.
Experience with Type 1 encryption devices, including KG175X and KG142.
Experience developing IT checklists, standard operating procedures, and guides.
Experience deploying DISA STIGs and conducting Government network assessments.
AI experience if applicable to the program.

Responsibilities

Operate and troubleshoot autonomously as a senior-level contributor, both in customer-facing work and with engineering team members.
Design, build, and troubleshoot network and network security architecture.
Analyze and develop new hardware requirements and prepare hardware acquisition specifications.
Provide engineering escalation support for LAN/WAN operations, network automation and tooling, and network security appliances.
Coordinate with Information Assurance Security Engineers to create and validate designs against required security controls and maintain Authority to Operate for each enclave.
Implement and maintain DISA STIG requirements.
Create, review, and update technical documentation for integration projects.
Provide implementation documentation and templates for deployment and sustainment phases of network equipment and services.
Identify and diagnose complex performance, security, and technical issues.
Comply with company safety, quality, operational, and environmental procedures and requirements.
Travel up to 20%.