Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. Amentum is seeking a Senior Network Engineer to join our team of passionate individuals in Fort Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.
In support of DISA, the Intel and Cyber Division is assembling a team to support a program that provides critical network capabilities to the Department of Defense. We are committed to recruiting and retaining this team for prototype development, test, and demonstration, as well as making this team available longer term for integration, deployment and sustainment as needed.
Candidates interested in joining the team must be critical thinkers, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment that supports a critical and rewarding mission. We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes.
Responsibilities:
The duties and responsibilities of the Senior Network Engineer include, but are not limited to, the following:
- Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.
- Design, build and troubleshoot network and network security architecture.
- Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
- Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.
- Coordinate with the Information Assurance Security Engineers to validate all designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.
- Create, review, and update technical documentation in support of integration projects.
- Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
- Identify and diagnose complex performance, security, and technical issues.
Qualifications - External
Requirements:
- Cisco Certified Network Associate (CCNA) certification
- Experience building, troubleshooting and testing IS-IS and/or OSPF networks
- Experience building, troubleshooting and testing MP-BGP underlays and overlays
- Experience building, troubleshooting and testing MPLS networks: RSVP-TE, LDP, and SR-MPLS.
- Experience building, troubleshooting and testing routing policy and redistribution.
- Experience building, troubleshooting and testing DMVPN and/or SD-WAN.
- Experience building, troubleshooting and testing different flavors of STP.
- Experience standing up and troubleshooting new circuits with the ability to fault isolate issues to CE equipment, demarc and/or carrier.
- Experience building, troubleshooting and testing network security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point security
- Experience with MS Office applications such as Excel, Word, Outlook, and SharePoint.
- Ability to work both independently and as part of a team in a dynamic environment.
- Ability to travel up to 20%.
Clearance Required:
- Must have active Top Secret clearance with SCI eligibility
Minimum Education:
- Bachelor’s Degree in an IT related field
Minimum Years of Experience:
Required Certifications:
- Must meet DoD 8570.01-M IAT-II or IAM-I baseline certification requirements
Preferred:
- Cisco Certified Network Professional (CCNP) certification
- Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.
- Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.
- Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.
- Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.
- Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.
- Extensive experience with Cisco IP telephony products
- Experience with Type 1 encryption devices including, but not limited to: KG175X and KG142
- Experience developing IT checklists, SOPs, guides, etc.
#INDTech
Job Type: Full-time
Pay: $170,000.00 - $200,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible schedule
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Parental leave
- Professional development assistance
- Referral program
- Retirement plan
- Tuition reimbursement
- Vision insurance
Education:
Experience:
- network security architecture design/build/troubleshooting: 10 years (Required)
- End point security: 10 years (Required)
- Shell Scripting: 10 years (Required)
License/Certification:
- CCNA (Required)
- IAT Level II Certification (Required)
- TS/SCI (Required)
Location:
- Fort Meade, MD 20755 (Required)
Security clearance:
Ability to Commute:
- Fort Meade, MD 20755 (Required)
Ability to Relocate:
- Fort Meade, MD 20755: Relocate before starting work (Required)
Work Location: In person
