Network Engineer

MTSI is seeking an experienced Network Engineer to support a digital transformation initiative with our AFRL customer at Wright-Patterson AFB. You will be responsible for assisting in the overall design, implementation, and maintenance of a complex multi-level security, multi-tenant, multi-domain environment. This role requires advanced knowledge of Cisco FTD/FMC and Dell Switching products. Experience with complex virtual networking in hyperconverged infrastructure is a plus. You will assist with the process engineering for functions such as firmware patching, logging, and threat scanning and configure, implement, and document those processes and train others on them.

Additionally, you will support administration, troubleshooting, security administration, access control, and integration between systems. This role will be performed in our customer's facility at WPAFB. Individuals best suited for this role must be able to work autonomously and possess the ability to find and solve complex problems as well as assist others with solving IT problems they are facing. They should also enjoy problem solving and be able to cope with sudden changes in taskings. Ideally this candidate would possess a wide range of experience with the installation, configuration, and administration of a wide variety of complex network topologies. These include but are not limited to SFP, SFP+, QSFP, and breakout configurations, Multi-tier VLAN segmentation and routing, VRF-lite and full VRF implementations across multiple domains, Cross-site and multi-data center topologies.

Responsibilities

Duties to be independently executed include but are not limited to:

• Continued updates to the design and configuration of a uniquely complex set of networks.
• Capacity planning, resilience modeling, and performance tuning.
• Network troubleshooting, maintenance, and improvements.
• Monitoring health and performance of network infrastructure using tools such as SolarWinds and Elastic.
• Configuration, documentation, maintenance of network infrastructure mostly comprised of Cisco FTD/FMC and Dell managed switching products.
• Configuration and documentation of automated network device configuration, backup, and policy enforcement etc. via Ansible, Python, or REST APIs (Cisco FMC API, Dell RESTCONF/NETCONF)
• Working with leadership and teammates to develop and/or maintain systems and network documentation.
• Assisting with security audits and working with staff to remediate any and all security findings with supported systems and devices.
• Working with cross-functional IT Teams to ensure effective execution of services and support.
• Planning and execution of deploying new features and/or augmentation that includes scoping, sizing, planning for scalability, etc.
• Leading integration efforts between networking products and logging/management platforms and services including Solarwinds and Elastic.

Required Qualifications:

• Ten years of experience, four-five of which should include planning and execution of complex networks. Experience may be substituted for bachelor's degree in computer science, Information Systems Management, or Information Assurance/Cyber Security.
• Must have at least an active Secret clearance.
• Minimum of 5 years of experience in engineering and administering DoD networks.
• Must have a DoD IAT Level II - DoD 8140 (Formally 8570) certifications (i.e., Security+), DoD IAT Level III - DoD 8140 (Formally 8570) CISSP or CASP+ preferred.
• Must have experience with multi-tier VLAN segmentation and routing and VRF-lite and full VRF implementations across multiple domains.
• Must have experience with NAT, Access Control Policies, VPNs (Site-to-Site and AnyConnect), and Firewall management.
• Must have advanced experience with Cisco FTD/FMC and Dell managed switching products.
• Must have experience administrating a Secret or higher classification networks.
• Must have experience with planning, implementing, administering, and securing network infrastructure including network security appliances, routers, managed switches, peripherals, cabling, and other equipment.
• Must have expert knowledge of TCP/IP, EtherChannel, OSPF, BGP, NAT, Access Control Policies, VPNs (Site-to-Site and AnyConnect), Firewall management, and static routing scenarios IT networking concepts.

Desired Qualifications:

• TS clearance with SCI eligibility preferred.
• Experience with network monitoring and log aggregation tools desired.
• Experience with Nutanix AHV virtual networking desired.
• Experience with Linux, especially networking/security is a plus.
• Experience with RHEL specific technologies, like Satellite, Ansible automation, IDM etc is a plus.
• Experience with HCL BigFix platform is a plus.
• Experience with Elastic log aggregation is a plus.
• Desired certifications Cisco CCNP Security or Enterprise, Cisco FTD/FMC Specialist, Dell Networking Specialist (D-Networking-SC), Nutanix Certified Advanced Professional (NCAP), ITIL v4.

#LI-ZS1