Senior Network Engineer (TS/SCI with Poly)

Braxton-Grant Technologies•Columbia, MD

2d•Onsite

About The Position

Braxton-Grant Technologies is looking for a Senior Network Engineer to provide assistance in all aspects of network management from network design through implementation, maintenance, and upgrading of existing networks. This role will ensure the overall health and strong security posture of complex network architectures and will be responsible for designing, implementing, and supporting network and communication solutions within a distributed software engineering environment. Responsibilities include analyzing technical requirements and network performance, troubleshooting connectivity and performance issues, and recommending network component purchases, upgrades, or modifications. The Engineer will ensure compliance is maintained with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded.

Requirements

Bachelor’s degree in Engineering from an accredited college or university is required. Four (4) years of additional network engineering experience may be substituted for a bachelor’s degree.
Active TS/SCI clearance with polygraph.
Twelve (12) years of directly related experience.
Five (5) years of experience with What’s Up Gold and Netflow.
Five (5) years of demonstrated experience in Computer Network Operations - Protection Level (PL) 3 high/high solutions utilizing Layer 2 to Layer 7.
Security+ Certification.
Experience deploying, operating, managing, and monitoring network security devices and systems, with advanced knowledge of technologies including application, proxy, and Next Generation Enterprise firewalls; Control Center Management appliances; IPsec, SSL, and SSH; Cisco Secure Access Control Server (ACS) and Cisco Security Manager (CSM); Cisco VPN and firewall solutions; web proxies; load balancers; and related LAN/WAN network hardware and software.
Ability to work independently with little direction and guidance.
Excellent writing and communication skills, including the ability to develop analytical documents and conduct oral presentations.
Understanding of and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions.
Experience with Intelligence Community Directive (ICD) 503 instructions, system accreditation. and security system documentation.
Knowledge of IP services (IPv4, VPN, IPv6, Multicast, QOS, SNMP, VOIP, VTC, etc.).
Experience providing reports and products to senior management and customers.
Experience with plans, designs, and evaluations of network security systems and architectures.

Nice To Haves

CCNP Security and/or CCNA Security certification
Prior experience with Palo Alto firewalls
Palo Alto certification(s)
ITIL certification
Prior experience with DMVPN
Prior experience with Symantec/Blue Coat products
Symantec/Blue Coat certification(s)

Responsibilities

Design solutions for and integrate, configure, deploy, test and provide support for numerous types of network devices, interfaces and methodologies
Optimize end-to-end system performance and dataflow management
Configure and optimize the network to connect various front-end and back-end components
Coordinate with the system engineering and dataflow efforts to ensure proper mission operations with minimal down time
Facilitate the implementation of high-speed, scalable, fault-tolerant network topologies as applicable to WAN and LAN design
Implement specific network solutions to support server requirements to include load-balancing, VPN’s, firewall contexts, and network address translation (NAT) where appropriate
Minimize network latency and maximize data throughput through design analysis and network performance monitoring tools
Manage assigned tasks and provide guidance to Junior Network Engineers
Validate new and existing dataflow and data formats
Coordinate with appropriate dataflow organizations and end-customer recipients, follow-on data repositories and tasking organizations and understand potential adverse impacts on system-wide dataflow
Design, integrate, test and deploy RF communications solutions
Lead large efforts of dynamic requirements and scale
Work with System Engineers and cross-organizational teams to define requirements
Support efficient repeatable inspection process of network boundary traffic to inspect for evidence of successful and failed compromises, Advance Persistent Threats, and misuse of standard, permitted services
Support efficient repeatable inspection process to support review of all boundary services including but not limited to firewalls, proxies, and VPNs to ensure the security posture of the services are consistently applied and done so in accordance with mission and industry best practices
Support regular technical assessments of network boundaries including use of security tools in coordination with security elements of the Agency to ensure boundaries remain secure
Support monthly access reviews to verify that access remains limited to authorized users and is restricted to the minimum level necessary to perform job functions
Support security investigations as requested by Agency security organizations to include traffic inspection, dissection and reassembly of traffic
Consult on and engineer next-generation solutions compliant with Agency policies to meet changing security needs, incorporating industry best practices
Design, configure, deploy, and monitor integration of network security solutions with Agency-authorized authentication services including PKI, TACACS, RADIUS, and Active Directory
Design, configure, deploy and monitor local and global load balancing functions which support network performance while maintaining security solutions

Benefits

competitive pay
meaningful professional development opportunities
Employer-subsidized HSA-compatible medical plans with out-of-network coverage and wellness rewards
Vision and dental PPO plans
Employer-paid short term disability insurance
Employer-paid basic life and AD&D insurance
Voluntary long-term disability insurance
Voluntary supplemental disability, hospital protection, accident insurance, critical illness and cancer, and whole life policies
401k plan with generous employer match
Professional development and tuition reimbursement up to $5,250 annually
Employee referral bonus eligibility
Up to 160 hours of PTO annually, aligned with applicable state leave regulations
10 paid holidays