The Network Engineer II supports the Information Technology (IT) Networking and Communications Operations and Maintenance (O&M) team to provide enterprise-level, high performance, highly available networking services in direct support of the Activity’s business and mission needs. Specifically, the network engineers will be responsible for a variety of engineering and operational related assignments associated with deployed operational solutions backed by Cisco, Juniper, Riverbed, and SolarWinds on multiple sets of enterprise-level IT systems in support of the Activity’s Remote Office/Remote Branch (ROBO) and data center environments.

Under the guidance of the Senior Network Engineer, the Network Engineers provide O&M support – installation, testing, validation, sustainment, upgrading, and decommissioning – as it relates to enterprise networking devices to include: switches, routers, firewalls, encryption devices, copper- and fiber-based connectivity. They also support the mid-to-senior level internal escalation tier(s) for the Networking O&M team providing advanced troubleshooting support and guidance to rapidly assess and remediate challenges in the networking arena that arise.

Network Engineers produce and maintain documentation of the network system(s), sub-systems(s), and component(s) in the Activity’s IT Networking Portfolio, including as-built documentation, capacity/performance plans, as well as other areas of server systems life-cycle planning.

Travel approximately 20% annually.

• Shall be Cisco Certified Network Professional (CCNP) Routing and Switching and or CCNP Data Center Certified.
• Shall have 5 or more years of progressive and increasingly complex experience working with enterprise-level Cisco hardware, operating systems (IOS, NX-OS, ACI, etc.), and technologies (Voice, Video, Routing, Switching, Security, etc.) across enterprise-grade information systems and networks.
• Shall have 3 or more years of experience working with enterprise-level Cisco-based Routing and Switching technologies (i.e., BGP, EIGRP, LACP, HSRP, OSPF, PC, QoS, STP, VPC, VRF).
• Shall have 3 or more years of experience working with secure encrypted networking devices (i.e., Taclanes and Border Guards) and communication circuits, protocols, and configurations.
• Shall have 3 or more years of experience working with network-based security technologies, such as Next Generation Firewalls and Access Control Lists (ACLs) to secure network traffic at all supported layers of the OSI reference model.
• Shall have 3 or more years of experience operating and maintaining networking solutions in secure processing environments which must adhere to U.S. Government Information Assurance and Security standards such as the Defense Information Systems Agency (DISA) Security Requirement Guides (SRGs) and Security Technical Implementation Guides (STIGs).
• Demonstrated experience monitoring and assessing networking systems and solutions proactively for performance degradation, and tuning and optimization opportunities.
• Bachelor’s Degree from an Accredited University.
• Shall possess GIAC Security Essentials (GSEC) or Security+ Continuing Education (CE) or Systems Security Certified Practitioner (SSCP) to meet the minimum credential requirements for Cyber IT/Cybersecurity Workforce (CSWF) Journeyman proficiency level as outlined in SECNAV M-5239.2.

Desired Qualifications:

• Strongly desired to be CCNP Collaboration and/or CCNP Security Certified.
• Demonstrated experience operating, tuning, and troubleshooting Cisco’s unified Communications Manager (CUCM) and TelePresence Management Suite (TMS) and TelePresence Videos Communications Server (VCS) to support enterprise Collaboration (i.e., Voice and Video) services across a WAN.
• Demonstrated experience working with software-based configuration management solutions capable of documenting, storing and on-demand deployment of pre-generated reviewed, and approved network-device configurations such as SolarWinds Network Configuration Manager (NCM).
• Working knowledge of Cisco data center network solutions, technologies, and best practices to support the engineering, design, implementation, and management of modern data center infrastructure.
• Working knowledge of Cisco local and wide area networking (LAN/WAN) solutions, technologies, and best practices to support in the engineering design, implementation, and management of Remote Office/Remote Branch networking requirements as well as smaller purpose-built information systems.
• Working knowledge of Cisco networking security solutions, technologies, and best practices to support the secure implementation and sustainment of enterprise network devices in line with information assurance (IA) and security (INFOSEC) compliance, governance, and requirement. Personal experience working with Cisco Adaptive Security Appliances (ASA) and like products is a plus.
• Working knowledge of advanced troubleshooting techniques, methodologies, processes, and practices to quickly identify and assess and issue, develop the strategy to resolve the issue, implement the resolution, and restore the degraded entity to an operational state while maintaining concern for the original configuration and the overall INFOSEC posture of the environment.
• Familiarity with operating and maintaining the Riverbed SteelHead appliance product line to provide WAN Optimization and Deep Packet Inspection (DPI) throughout a globally dispersed WAN.
• Familiarity with operating and maintaining Juniper Firewalls to include device installation, setup and configuration, testing, and sustainment of firewall, proxy, and VPN rules.
• Familiarity with advanced Cisco Data Center technologies such as the Data Center Network Manager (DCNM) and/or Application Centric Infrastructure (ACI) to support Software Defined Networking (SDN) and Software Defined Data Center (SDDC) enterprise solutions.

This position will require U.S. citizenship and an active DoD Top Secret SCI clearance and have the ability to obtain a CI polygraph.