IP Network Engineer

Location: Fort Meade, MD

Clearance required: Secret Clearance

Certification required by project: IAT Level 2 or willing to obtain within 3 Months of joining

Overview:

GES is seeking a highly skilled IP Network Engineer, to join our DISA program team in Fort Meade, MD.

This is an exciting key position and opportunity to leverage your experience, skills, and leadership by providing support for end-to-end engineering solutions for DISN projects. As Lead Network Engineer, you will lead and oversee the planning and implementation of solutions across multiple technologies and platforms in the DISN and provide end-to-end integrated solutions ensuring mission success. You will support and lead technical planning, analysis, engineering, and testing for DISN initiatives and make technical recommendations.

Responsibilities (include, but not limited to):

• Analyzes and studies complex system requirements.
• Designs software tools and subsystems to support software reuse and domain analyses and manages their implementation.
• Develop and validate system architecture.
• Develop and support initial implementation and provide lifecycle engineering of network architecture.
• Support Quality of Service (QoS) policies, requirements, and testing.
• Provide technical expertise in design review, lab testing & test report, implementation plan and deployment of new advanced large-scale complex DoD networks.
• Provide emerging insertion technologies (i.e. new features, capabilities, etc.).
• Support mission partners to satisfy the interoperability requirements.
• Provide all required documentation in support of Configuration Control Boards (CCB) and supervises software configuration management.
• Provide Tier III support and oversee Tier III support engineers.
• Conduct market research to find products to meet requirements.
• Implement MPLS services offerings on the DISN network called IP Transport Provider Edge (IPTPE). MPLS services include L3VPN, L2VPN, Virtual Private LAN service (VPLS) and Carrier Supporting Carrier (CsC). IPTPE platforms tested include Juniper MX960/MX480 and Cisco ASR9010/ASR9006 routers.
• Perform testing and support implementation of the DMZ COI VPN (part of NIPRNet Hardening project), which provides separation of the NIPRNet traffic and Mission Critical Community of Interest (COI) traffic using the MPLS L3VPN service.
• Configure and perform crypto testing and troubleshooting using various protocols.
• Provide technical security expertise in design, test, evaluation, and deployment of advanced large-scale complex DoD networks.
• Review security requirements set by DoD agencies for the NIPRNET network protection; Assess and analyze current NIPRNET network architecture; Propose and analyze potential solutions.
• Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and
• determines/implements effective countermeasures IAW established policies/regulations/directives.
• Deliver Router and Firewall Test Plans and resulting Test Reports; prepare field recommendations and Configuration Guides.

Experience/Qualifications:

• DoD and/or Government program experience preferred; DISA experience a plus.
• BA/BS in a technical discipline (engineering, information technology, etc.) with at least 5 years of experience
• Large Enterprise or DoD IP Design Experience running BGP/MP-BGP (multi AS) and MPLS routing protocols
• Extensive router regression testing experience with Cisco ASR9K (ASR9010/ASR9006) routers
• Strong routing protocols experience: BGP, MPLS/RSVP, OSPF, IS-IS, Multicast, Layer-2/Layer-3 Virtual Private Network (VPN) and
• Carrier Supporting Carrier (CsC).
• Working knowledge of Microsoft Office Tools: PowerPoint, Word, and Excel
• Excellent communication (verbal and written), effective leadership, and interpersonal skills

Preferred Experience/Qualifications

• Experience with Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, Smartbits and Agilent N2X
• CCNP or JNCIP or equivalent routing and switching experience
• Experience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, SONET
• Working experience with network security products (Firewalls, IDSs, SIEMs) and SNMP a plus