Network Engineer - LLJP00001433 at Softworld Inc

***Due to the nature of the work being performed US Citizenship is required***

Job Title: Network Engineer

Location: Lexington MA 02420

Onsite Requirements:

• Experience with general dynamics encryption - Gem one encryptors.
• Juniper and palo alto networks
• Maintaining compliance for STIG's - Background with STIG security is critical.

Summary:

• The Enterprise Technology and Tools (ETT) Team provides resources to assist with compliance execution, reporting, and vulnerability-remediation activities.
• These services are offered across the Laboratory through the ISD Embedded System Administrator (ESA) Group.
• In addition, the ETT Team is responsible for the overall operation of monitoring tools. Such tools include SolarWinds, the Laboratory's IT service management (ITSM) tool (Footprints), and the Laboratory's central visibility tool-BigFix.

Job Description:

Network Design and Engineering responsibilities include but not limited to:

• Design, implement and maintain a secure, robust and fault tolerant network infrastructure.
• Monitor and update configurations to maintain STIG compliance.
• Perform code, software and firmware updates as needed to ensure network infrastructure is kept up to date with current versions.
• Research, develop and implement automation to support the items noted above and enhance our network infrastructure.
• In collaboration with the CES infrastructure team, develop and execute a plan to integrate classified cloud services with our existing on-premises networks.
• Provide project support to internal teams where expertise in classified networks is required.
• Provide day-to-day guidance, mentoring and tasking to members of the CES Network Team.

On very rare occasions if the team is understaffed network Support responsibilities include but not limited to:

• Provide 1st tier support resolving Service Desk tickets.
• Maintain security documentation and network diagrams.

Required Minimum:

• Experience with Juniper network hardware.
• Experience with Palo Alto firewalls.
• Experience with General Dynamics type 1 encryptors and the GEM One management software.
• Experience with network automation (preferably with Ansible)
• Experience with cloud network integration (preferably classified cloud)
• Expert knowledge of TCP/IP, DNS, DHCP, SNMP and BGP protocols.
• Strong understanding of DoD networks and STIG security controls
• Security+ certification or the ability to obtain within 6 months.
• Demonstrated ability to learn new technologies and disciplines quickly.
• Ability to work independently toward delivery of goals as well as collaborate in team efforts.
• Strong foundational skills in organizing and managing technical projects.
• Excellent customer service skills (verbal and written)
• Bachelor's degree in a relevant field or the equivalent technical experience and certifications.

Must Have:

Certification

Security+ certification (or the ability to obtain within 6 months of employment)

Degree Level

Bachelor's Degree

Experience:

• Currently holds a Secret Clearance (OR a higher clearance)
• Networks
• TCP/IP, DNS, DHCP, SNMP and BGP protocols - 7 years
• Security
• DoD STIG's - 7 years

Soft Skills:

• Strong customer service skills and communication
• Software
• General Dynamics type 1 encryptors and the GEMOne management software - 2 years

Software Tools:

• Network automation (preferably with Ansible) - 2 years
• Systems
• Cloud network integration (preferably classified cloud) - 2 years

Preferred:

• Experience with the Command Cyber Readiness Inspection (CCRI) process and maintaining an inspection ready environment.