Network Routing Design Engineer Senior Security Clearance

Position: Network Routing Design Engineer Senior with Security Clearance
Location: Pearl Harbor
Network Routing Design Engineer Senior Years of experience: 10+ years 5 days on-site
- * Primary location:
Onsite at Pearl Harbor, HI
* Secondary options:
Bremerton, WA or Whidbey Island, WA Clearance:
Active Secret

Certifications:

Must possess professional-level certifications in one or more technology related vendor solutions such as Cisco Certified Network Professional (CCNP) Service Provider, Juniper Networks Certified Internet Professional (JNCIP), or equivalent Certification, or demonstrate sufficient experience in lieu of certification.

Education:

Bachelor's Degree in Computer Science, MIS, Business, or related field We are seeking a highly skilled Senior Network/Security Engineer to provide expert-level support and engineering for complex enterprise network systems within a large organizational environment. This role involves maintaining and enhancing network capabilities, ensuring high availability, and integrating advanced security and identity management solutions. The engineer will assist the team lead in daily engineering duties and play a critical role in system design, capacity planning, and security hardening.

? Core Responsibilities & Duties
* Network Operations & Administration:
* Perform daily administration of Local Area Network (LAN), Base Area Network (BAN), and Wide Area Network (WAN) infrastructure.
* Schedule and manage complex network conversions and cutovers.
* Evaluate and design communication hardware and software solutions.
* Troubleshoot and resolve complex network-related problems across LAN/BAN/WAN.
* Capacity and Traffic Management:
* Conduct Capacity and Demand Management activities in accordance with established circuit management processes.
* Support traffic analysis and design effective traffic shaping plans.
* Monitor and optimize directory services replication speed across the enterprise.
* Web Content & Security Design:
* Design capabilities and features to allow secure end-user access to internal and external web content via HTTP and HTTPS protocols.
* Design and implement caching and proxy solutions, including content control (e.g., filter by category, policy application scheduling, and automated filter category updates from approved industry providers).
* Design advanced Anti-malware and HTTP/HTTPS inspection solutions.
* Routing, Security & Identity Integration:
* Assist with the development and integration of identity and access management (IAM) requirements and monitor security updates.
* Develop, update, track, and manage the Internet Protocol (IP) scheme and addressing.
* Design, develop, and integrate network routing utilizing Border Gateway Protocol (BGP), Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Virtual Routing and Forwarding (VRF).
* Implement network security utilizing VRF, Multi-Protocol Label Switching (MPLS), Access Control Lists (ACL), Internet Protocol Security (IPSEC), and Layer 2 Virtual Private Networks (L2 VPN).
* Oversee Rights Management Services for administrators, users, and groups.
* Perform integration with Public Key Infrastructure (PKI) certificates and network accounts to support two-factor authentication for all directory service domain account categories, aiming to eliminate password-based authentication.
* Multi-Vendor Solutions:
* Design and integrate multi-vendor solutions utilizing technologies from major providers (e.g., Cisco, Juniper, Brocade, and others). ? Required Experience & Certifications
* Proven experience with the performance, design, configuration, and testing of complex large-scale computer networks.
* Experience with interoperability of network design, integration, and implementation within Federal or Joint military environments.
* Expert knowledge of Domain Name Service (DNS), Dynamic Host Configuration Protocol (DHCP), and URL filtering.
* Must possess Information Technology Infrastructure Library (ITIL) version 3 Foundation certification.
* Must possess professional-level certifications in one or more technology-related vendor solutions (e.g., Cisco Certified Network Professional - CCNP Service Provider, Juniper Networks Certified Internet Professional - JNCIP, or equivalent certification), or demonstrate sufficient experience in lieu of certification.
* General networking background expected:
Knowledge of application networking ports and protocols, Information Assurance (IA) principles, routing, and LAN architectures.