Network Administrator- Journeyman Security Clearance

Certifications & Clearance

CompTIA Security+CE. One or more of: CCNA, CCNP, CCNP‑Security, CCDP, JNCIS, JNCIP. DoD Secret Security Clearance Required (Top Secret Preferred).

Mixed IT experience is welcome, but the candidate must have substantive Network experience.

The successful candidate will have a strong work ethic and be a self‑starter. They will possess the ability to work independently and as part of a team with little direct supervision.

Provide day‑to‑day network engineering and operational support for unclassified/classified network infrastructure. Work on network‑related projects and report progress to the customer. Recommend solutions for new equipment, software, network configuration, design, and management, including detailed specifications, hardware components, and part numbers.

• Installation, configuration, and maintenance of Layer 2 and Layer 3 network devices
• Expansion, modification, integration, and redundancy of the network
• Diagnostics and testing of network using software/hardware tool suites
• Firewall management: modify, add/remove policies
• Traffic analysis:
  Net Flow, SNMPv3 traps, syslog, Nuttcp, Wireshark, etc.
• Network research, analysis, and engineering
• Network modeling and simulation
• Assist customers with network security audits and inspections
• Coordinate IT work with non‑IT customers and site managers
• Collaborate with other IT teams—Server, helpdesk, Information Assurance/Security—to meet customers’ needs
• Follow established change procedures and implement changes
• Validate and verify proper functioning of network devices

• Excellent knowledge of network and internet technologies, specifically L2 and L3 switching, basic routing, and network security
• Experience installing, configuring, and maintaining switches, routers, firewalls, and other network devices
• Experience with DoD or other federal government networks
• Knowledge of DISA STIG and IAVM procedures
• VLAN, STP, and layer 2 switching, LAN management
• Expertise with Juniper, Palo Alto, Forti Net, and/or Cisco firewalls
• Interior and exterior routing protocols
• Network monitoring applications such as Solar Winds
• COMSEC accounting or handling policies training
• Working knowledge of 802.1x and RADIUS as it pertains to network security
• HAIPE Inline Network Encryption (Taclane) management
• Working knowledge of site‑to‑site VPN tunnels

• RADIUS server experience
• TACACS experience
• IPsec site‑to‑site VPN
• VoIP
• Secure Copy Protocol (SCP)
• Knowledge of NTP
• Basic understanding of DNS
• Knowledge of PKI and IKE
• Linux experience
• MS Visio
• HBSS
• GEM‑X
• PERL scripting