Senior Network Engineer

Amentum•Fort Meade, MD

25d•$180,000 - $240,000•Onsite

About The Position

Amentum is seeking a Senior Network Engineer to join their team in Ft. Meade, MD. This role supports challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission, specifically in support of DISA's Intel and Cyber Division. The team is expanding to support a program providing critical IT capabilities to the Department of Defense, focusing on engineering, assembling, integrating, deploying, and sustaining an innovative IT enterprise solution. Candidates should be critical thinkers with a strong work ethic, capable of working independently or as part of a team in a dynamic environment. The role requires adaptability and the ability to quickly learn new products and processes, with a focus on detail and rapid problem-solving.

Requirements

Cisco Certified Network Professional (CCNP) certification
Experience designing, configuring, troubleshooting and testing: IS-IS and/or OSPF networks
Experience designing, configuring, troubleshooting and testing: MP-BGP underlays and overlays
Experience designing, configuring, troubleshooting and testing: MPLS networks: RSVP-TE, LDP, and SR-MPLS
Experience designing, configuring, troubleshooting and testing: Complex routing policies and protocol redistribution concepts and strategies
Experience designing, configuring, troubleshooting and testing: DMVPN and/or SD-WAN
Experience designing, configuring, troubleshooting and testing: Cisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management software
Experience deploying and testing: Cisco Identity Services Engine (ISE)
Experience deploying and testing: New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrier
Experience deploying and testing: Network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.
Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions.
Ability to travel up to 20%.
Must have active Top Secret clearance with SCI eligibility
Bachelor’s Degree in an IT related field, or an additional five (5) years of Network Engineering experience
10 (ten) years of network engineering w/ 3 years of network design architecture and implementation
DoD 8570.01-M IAT-II baseline certification requirements

Nice To Haves

Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.
Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.
Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.
Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.
Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.
Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systems
Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
Experience developing IT checklists, SOPs, guides, etc.
Experience deploying DISA STIGs and conducting Government network assessments.

Responsibilities

Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.
Design, build and troubleshoot network and network security architecture.
Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.
Coordinate with the Information Assurance Security Engineers to create and validate all current and future designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.
Create, review, and update technical documentation in support of integration projects.
Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
Identify and diagnose complex performance, security, and technical issues.