IP Network Engineer

Responsibilities

• Analyzes and studies complex system requirements.
• Designs software tools and subsystems to support software reuse and domain analyses and manages their implementation.
• Develop and validate system architecture.
• Develop and support initial implementation and provide lifecycle engineering of network architecture.
• Support Quality of Service (QoS) policies, requirements, and testing.
• Provide technical expertise in design review, lab testing and test report, implementation plan and deployment of new advanced large-scale complex DoD networks.
• Provide emerging insertion technologies (i.e., new features, capabilities, etc.).
• Support mission partners to satisfy interoperability requirements.
• Provide all required documentation in support of Configuration Control Boards (CCB) and supervise software configuration management.
• Provide Tier III support and oversee Tier III support engineers.
• Conduct market research to find products to meet requirements.
• Implement MPLS services offerings on the DISN network called IP Transport Provider Edge (IPTPE). MPLS services include L3
  
  VPN, L2
  
  VPN, Virtual Private LAN service (VPLS) and Carrier Supporting Carrier (CsC). IPTPE platforms tested include Juniper MX960/MX480 and Cisco ASR
  9010/ASR
  9006 routers.
• Perform testing and support implementation of the DMZ COI VPN (part of NIPRNet Hardening project), which provides separation of the NIPRNet traffic and Mission Critical Community of Interest (COI) traffic using the MPLS L3
  
  VPN service.
• Configure and perform crypto testing and troubleshooting using various protocols.
• Provide technical security expertise in design, test, evaluation, and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET network protection; assess and analyze current NIPRNET network architecture; propose and analyze potential solutions.
• Review security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determine/implement effective countermeasures IAW established policies/regulations/directives.
• Deliver Router and Firewall Test Plans and resulting Test Reports; prepare field recommendations and configuration guides.

• DoD and/or Government program experience preferred; DISA experience a plus.
• BA/BS in a technical discipline (engineering, information technology, etc.) with at least 5 years of experience.
• Large Enterprise or DoD IP Design Experience running BGP/MP-BGP (multi-AS) and MPLS routing protocols.
• Extensive router regression testing experience with Cisco ASR9K (ASR
  9010/ASR
  9006) routers.
• Strong routing protocols experience: BGP, MPLS/RSVP, OSPF, IS-IS, Multicast, Layer-2/Layer-3 Virtual Private Network (VPN) and Carrier Supporting Carrier (CsC).
• Working knowledge of Microsoft Office tools:
  PowerPoint, Word, and Excel.
• Excellent communication (verbal and written), effective leadership, and interpersonal skills.

• DoD Active Secret Clearance Required.
• DoD Approved 8570/8140 Certification Required, i.e., Security+ CE, or Equivalent.
• Must be a U.S. Citizen.
• No/limited travel is expected.

• Experience with network test equipment / traffic generators such as IXIA, Spirent Test Center, Smartbits and Agilent N2X.
• CCNP or JNCIP or equivalent routing and switching certification.
• Experience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, SONET and SNMP.
• Working experience with network security products (firewalls, IDSs, SIEMs).

Ability to type, communicate via telephone, and sit for extended periods of time.