active Secret)

Critical Solutions•Norfolk, VA

1d•Onsite

About The Position

Critical Solutions is seeking a VPN/Firewall Network Engineer to support a federal customer as part of its Transport Operations team. The engineer provides subject matter expertise in VPN, DMZ, and firewall network engineering for a large agency intranet, designing, implementing, operating, securing, integrating, and maintaining network services and security solutions. The role includes configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure firewall and VPN solutions, and administering Cisco network appliances. The engineer works with cross-functional engineering and project management teams, the Network Operations Center, network administrators, and other stakeholders to protect network infrastructure and improve operations. The position also supports incident, change, and problem management; operations and maintenance; ITSM and DevSecOps initiatives; service improvements; and network upgrades. Work is onsite, scheduled Monday through Friday from 8:00 a.m. to 5:00 p.m., with weekend on-call duties as needed.

Requirements

U.S. citizenship and an active DoD Secret security clearance.
Bachelor of Science degree with relevant prior experience; work experience may substitute for the degree at the Hiring Manager's discretion.
An active DoD 8570.01 IAT Level III certification, such as CCNP Security, CISSP, or CASP+.
An active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks.
Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols such as BGP, OSPF, and IS-IS, switching protocols such as Spanning Tree Protocol, VLANs, LLDP, and VoIP, multicast protocols, and emerging network technologies.
Strong understanding and in-depth knowledge of IP network and subnet addressing.
Extensive knowledge of defense-in-depth principles, network architecture, modern network topologies, network appliance integrity, and common networking security elements.
Experience with Ansible, Python, and infrastructure-as-code network automation.
Ability to work or be called in during off-hours to meet customer mission support requirements.
Ability to participate in an on-call rotation for incident management.
Selected candidate must undergo the federal agency's background investigation and fingerprinting and successfully pass them.

Responsibilities

Provide VPN, DMZ, and firewall network engineering subject matter expertise for current agency operations.
Modify, operate, integrate, maintain, secure, and implement services for the as-fielded agency network.
Collaborate with the Network Operations Center, Network Administrators, and Network Engineering Team to define and improve network security appliances, testing and validation automation, and best practices.
Lead the development of network standard operating procedures and tactics, techniques, and procedures.
Drive continuous service improvements, system performance tuning, and enhancements.
Create and maintain Engineering Implementation Plans.
Plan and execute network upgrades and maintenance activities with operations, NOC, release management, and other stakeholders.
Provide Tier III escalation support and engage vendors for incident management.
Participate in root cause analysis for problem management.
Provide Tier III operations support to NOC watch staff.
Perform highly technical maintenance and configuration of firewalls, VPNs, and DMZ appliances.
Participate in the Transport Operations team's on-call rotation and support off-hours customer mission requirements.