Network Engineer​/Architect; SME

Sarela Tech is seeking a Network Engineer/Architect with subject matter expertise to support large-scale migration and operations on a large, high-profile DOD contract. The I3TS program provides enterprise-wide IT support to enable DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA’s internal and external mission partners operating in CONUS and OCONUS locations.

The Network Engineer/Architect SME supports design of a new, modernized updated and upgraded capabilities for DTRA. This role will be responsible for tech requirement definition, feasibility studies, pilot projects and implementations plans, as well as diagnosing and troubleshooting outages, monitoring networks, infrastructure and systems, and proving proactive mitigation strategies. Specifically, the candidate must have experience with SD-WAN solutions and how to transform from a Non-SDWAN.

The candidate will also work with Cloud native SDN and Software Defined Access and EVPN for on-premise application. Working in a Dev Sec Ops  environment experience will be required for creating and building new solutions and perfecting them.

This position requires U.S. citizenship with an active DoD clearance.

Primary Responsibilities:

Plan and design secure network solutions to consolidate connectivity services under an enterprise service.

Design secure wide area connectivity inclusive of underlay, overlay, and COI transport design that supports performance, quality of service, security, and mission requirements.

Provide secure access solutions leveraging wired and wireless technologies, integrating standards, use cases/scenarios, and develop associated implementation and transition plans.

Integrate capacity planning and scaling of network and security stack environments into the overall design of solutions.

Collect, investigate, and identify network optimization strategies and techniques to meet capacity and performance standards.

Identify legacy service paths (i.e. dataflow, firewall rulesets, and ACLs) and develop strategies and designs for the to-be enterprise service capability to meet requirements while balancing security, sustainability, and maintainability.

Support development of IP addressing schemes across IPv4 and IPv6 networks.

Work with information assurance teams to ensure compliance to DoD standards to assist with providing accreditation artifacts.

Minimum of a Bachelor’s degree in Science, Technology, Engineering and Math (preferred) with 12-15 years' experience or Master's degree with 10-13 years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).

Require network certification which shall meet or exceed a CCNP (comparable vender certification accepted upon review) with CCIE preferred.

Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.

Must have broad exposure to common IT infrastructure networking in the areas of LAN, WAN, TCP/UDP, Dual stack IPv4/IPv6, IPSec, VPN, and Firewall Micro-segmentation

Must have experience in working with two or more of the following vendor network technologies:
Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, and Fortinet.

Experience with SD-WAN and SASE solutions (preferably Versa), and corresponding technologies and protocols including overlay management and BGP protocols.

Some experience working with Azure and AWS cloud networking

Experience working with AAA servers, such as Cisco ISE or Aruba Clearpass, and endpoint posturing.

Experience working with Enterprise Wireless

Familiarity with Type 1 encryptors

Experience documenting logical or physical designs using drawing tools (e.g. Visio, PowerPoint, Gliffy, Cameo) to depict systems, subsystems, interfaces, components, and communications of I/T applications and infrastructure

Experienced and comfortable with conducting technical troubleshooting to resolve issues.

Experience conducting site surveys or analyzing data obtained from site surveys.

Experience creating or executing a migration plan to move circuits, network traffic,…