CCNP Network Engineer

Input Technology Solutions is seeking a Network Engineer for a great opportunity at Fort Meade, MD!

The duties and responsibilities of the Senior Network Engineer include, but are not limited to:

• Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.
• Design, build and troubleshoot network and network security architecture.
• Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
• Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.
• Coordinate with the Information Assurance Security Engineers to create and validate all current and future designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.
• Create, review, and update technical documentation in support of integration projects.
• Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
• Identify and diagnose complex performance, security, and technical issues.

• Cisco Certified Network Professional (CCNP) certification
• Experience designing, configuring, troubleshooting and testing:
  • IS-IS and/or OSPF networks
  • MP-BGP underlays and overlays
  • MPLS networks: RSVP-TE, LDP, and SR-MPLS
  • Complex routing policies and protocol redistribution concepts and strategies
  • DMVPN and/or SD-WAN
  • Cisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management software
• Experience deploying and testing:
  • Cisco Identity Services Engine (ISE)
  • New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrier
  • Network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
• Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.
• Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions.
• Ability to travel up to 20%.

• Must have active Top Secret clearance with SCI eligibility

• Bachelor’s Degree in an IT related field, or an additional five (5) years of Network Engineering experience.

• 10 Years of network engineering w/ 3 years of network design architecture and implementation
• Required
  
  Certifications:
• Cisco Certified Network Professional (CCNP) certification
• Must meet DoD 8570.01-M IAT-II or IAM-I baseline certification requirements

• Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.
• Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.
• Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.
• Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and Stealth Watch.
• Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.
• Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systems
• Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
• Experience developing IT checklists, SOPs, guides, etc.
• Experience deploying DISA STIGs and conducting Government network assessments.