Senior Network Engineer
About The Position
Serve as the senior technical lead for deployment, security, and operational availability of DTRA’s enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure. The role administers and configures F5 BIG-IP platforms and related application delivery and security services; maintains Cisco routing and switching infrastructure; and administers Palo Alto Networks next-generation firewalls. It also supports secure remote access, global load balancing, web application security, SD-WAN migrations, DoD security compliance, change control, and advanced incident response.
Requirements
- Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI).
- Meet applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement.
- At least five years of hands-on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM.
- At least five years of hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks next-generation firewalls.
- Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies.
- Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment.
Nice To Haves
- IAT Level III certification, such as CISSP or CASP+, consistent with the position’s applicable qualification requirements.
- F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM.
- Hands-on experience migrating F5 environments to rSeries or VELOS platforms.
- Cisco Certified Network Professional (CCNP) Enterprise certification.
- Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- Proven experience leading live SD-WAN migrations and cutovers with minimal operational disruption.
- Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.
Responsibilities
- Administer F5 BIG-IP platforms, including LTM, GTM/DNS, APM, and ASM/AWAF.
- Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors for highly available mission applications.
- Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM.
- Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers.
- Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats.
- Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation.
- Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime.
- Configure, administer, and troubleshoot Palo Alto Networks next-generation firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking.
- Apply DISA STIGs and remediate vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets.
- Prepare change control documentation and maintain network topology diagrams.
- Provide Tier 3/4 incident escalation support.
Benefits
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Profit sharing
- Tuition assistance
- Vision insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
