Senior Network Engineer

Cb•Ft Belvoir, VA

11d

About The Position

Serve as the senior technical lead for deployment, security, and operational availability of DTRA’s enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure. The role administers F5 BIG-IP platforms and supports highly available mission applications, secure remote access, global server load balancing, and web application security. It also maintains Cisco routing and switching infrastructure and Palo Alto Networks firewalls, supports SD-WAN migrations, applies DoD security guidance, and provides advanced operational support in a DoD environment.

Requirements

Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI).
Meet applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement.
At least five years of hands-on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM.
At least five years of hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks Next-Generation Firewalls.
Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies.
Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment.

Nice To Haves

IAT Level III certification, such as CISSP or CASP+, consistent with the position’s applicable qualification requirements.
F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM.
Hands-on experience migrating F5 environments to rSeries or VELOS platforms.
Cisco Certified Network Professional (CCNP) Enterprise certification.
Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
Proven experience leading live SD-WAN migrations and cutovers with minimal operational disruption.
Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.

Responsibilities

Administer F5 BIG-IP platforms, including LTM, GTM/DNS, APM, and ASM/AWAF.
Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors for highly available mission applications.
Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM.
Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers.
Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats.
Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation.
Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime.
Configure, administer, and troubleshoot Palo Alto Networks Next-Generation Firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking.
Apply DISA Security Technical Implementation Guides (STIGs) and remediate vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets.
Prepare change control documentation and maintain network topology diagrams.
Provide Tier 3/4 incident escalation support.