Network Site Reliability Engineer; w​/active Secret

Network Site Reliability Engineer (w/ active Secret)

Location:

Norfolk, VA
Clearance:
Secret
Type:
Full-time, Onsite
Salary Range: $87,000 - $112,000

Critical Solutions is seeking a Network Site Reliability Engineer to support our federal customer.

The Site Reliability Engineer (SRE) will support the reliability and operational integrity of complex enterprise network environments by developing accurate, implementation-ready network configuration deliverables supporting a variety of WAN and BAN solutions. The engineer will apply established engineering solutions, technical standards, and configuration baselines to customer- and site-specific requirements while accounting for existing network environments and mission needs.

The environment is heavily focused on Cisco Layer 2 and Layer 3 networking. The role requires strong networking fundamentals and the ability to interpret and correlate existing and proposed network information to develop technically accurate configurations appropriate for the target environment. Engineers must understand the technical function and network impact of configuration commands, rather than relying solely on template substitution, and be able to apply that knowledge across varying network requirements and environments.

• Develop accurate implementation-ready network configurations for complex enterprise WAN and BAN environments.
• Apply established engineering solutions, technical standards, and configuration baselines to site-specific network requirements.
• Review and correlate existing and proposed network information to determine appropriate configuration requirements.
• Develop and modify configurations across Cisco Layer 2 and Layer 3 network environments.
• Understand the technical function, dependencies, and network impact of configuration commands rather than relying solely on template substitution.
• Interpret and apply network addressing, routing, switching, interface, security, and redundancy requirements.
• Create and maintain supporting network configuration documentation reflecting existing and proposed network environments.
• Ensure configuration deliverables are technically accurate, complete, consistent, and appropriate for the target network environment.
• Participate in technical and peer review processes to validate configuration accuracy and technical viability prior to implementation.
• Apply established standards, technical knowledge, best practices, and lessons learned consistently across varying network requirements.
• Adapt to evolving network standards, engineering solutions, configuration templates, platforms, and customer requirements.
• Collaborate effectively with SRE, network engineering, development, and other technical teams supporting enterprise network services.
• Contribute network engineering expertise to broader SRE initiatives involving standardization, optimization, reliability, and automation.
• Support the evolution of automated network capabilities and processes in collaboration with specialized automation and development teams.

• Must be a U.S. citizen and possess an active DoD Secret Security Clearance or higher.
• B.S Degree and 7+ years of prior relevant experience or Masters with 2–6 years of prior relevant experience in data engineering, computer science, information systems, software engineering, mathematics, or a related technical discipline, with at least four years of relevant experience; additional directly related experience may be considered in place of a degree.
• Candidates should possess strong working knowledge of Cisco enterprise networking concepts and technologies, including:
  • Cisco IOS / IOS-XE configuration
  • Layer 2 and Layer 3 switching
  • VLAN configuration and VLAN assignment
  • 802.1Q trunking and native VLAN concepts
  • VLAN trunking Protocol (VTP)
  • Spanning Tree Protocol (STP/RSTP/MST)
  • Ether Channel, including LACP and PAgP
  • Access and trunk port configuration
  • Inter-VLAN routing
  • IPv4 addressing and subnetting
  • Static and dynamic routing
  • OSPF, EIGRP, and BGP
  • Route advertisement and route selection concepts
  • Access Control Lists (ACLs)
  • First-hop redundancy concepts
  • Network interface and port-channel configuration
  • TCP/IP networking concepts
• Must possess an active DoD 8570, IAT Level II Certification
• Must possess an active CCNA Certification

• Must possess and maintain both of the following: IAT Level II certification AND CCNA Certification

• Experience configuring or supporting Cisco Catalyst…