Senior Network Engineer at Spry Squared, Inc. - Cybersecurity and Managed IT Services in Colorado Springs, CO, United States

Job description

• Spry Squared is looking for a Senior Network Engineer for our client on NORTHCOM/NORAD Operations and Maintenance Contract (N2NOMS). This opportunity is in support of N2NOMS, an E&I and O&M program supporting the U.S. Northern Command and North America Aerospace Defense Command IT environment. The program provides a range of IT services including Campus and Data Center network infrastructure, software application support, enterprise infrastructure support, ITSM service desk and deskside support, telecommunications and mobility services, managed print services, Active Directory services, and video conferencing.
• You will be the subject matter expert skilled in Data Center and Campus networking design and operation support. This position requires working independently in a fast-paced, dynamic environment. The ideal candidate will be personable and articulate and will focus on making sure that the customers needs are met quickly and effectively. To be successful, you need to be a self-starter who can work with limited supervision, work closely with the entire engineering and operations team. Excellent communication skills are required to effectively interface with customers to understand requirements, issues, and mission needs, and then to be able to translate them into actions.

Responsibilities

• Conduct network and telecommunications system incident and problem investigation and diagnostics.
• Learn a new Government system and become the single Subject Matter Expert for all systems issues.
• Independently provide network engineering, and operations and maintenance (O&M) support for a mission-critical government system; support the system as the SME on the team imparting expertise to other team members, requiring broad and deep knowledge across the applicable technologies
• Plan and execute projects to perform uplifts and enhancements to the operational environment in accordance with strict change and release management processes.
• Lead problem resolution cell for challenging network issues; building automation and tooli125ng to support the operation team and improve service delivery to the customer
• Configure network switches; implement connectivity & other vendor technologies using copper & fiber; implement high availability (HA) as needed
• Implement defense-in-depth methodology by configuring appropriate firewall rules, security policies and other IS-consistent configurations; implement high availability configurations as needed
• Ensure secure network infrastructure through connectivity to backend AAA authentication services; ensuring secure configuration for remote & network resource access through 802.1X policies
• Design & maintain out-of-band (OOB) management network using TrippLite serial consoles, iDRAC and other technologies to ensure secure & available management of network devices
• Work with customer personnel, contractors, vendors to participate in design & specification of Private IP (PIP) and Internet circuits to support systems
• Ensure high availability of Network Time Protocol (NTP) across all networks to ensure consistent & accurate time is available to all servers & network devices.
• Ensure configurations consistent with industry best practices & FISMA to ensure that systems can maintain accreditation.
• Work within configuration management process to ensure consistent & secure modifications to equipment configurations
• Develop and maintain technical documentation and diagrams related to the field communications systems equipment & networks
• Provide engineering support, statistics/data gathering, modeling, creating/updating flowcharts and providing recommendations to determine the most efficient configuration of the network based on Engineering documents and experience.

Requirements

• Required qualifications
• Must have active SECRET clearance with ability to obtain TS/SCI clearance.
• Must be U.S. Citizen
• Bachelors degree with 12+ years of experience or a Masters degree with 10+ years experience.
• Currently certified at the Juniper JNCIP-SEC or JNCIE-SEC, Cisco CCNP-Enterprise or Cisco CCNP-Security level.
• Cisco Firepower ASA firewalls
• AnyConnect VPN clients
• Experience with Cisco networking equipment for an infrastructure refresh project
• Demonstrates extensive experience working independently and collaboratively to troubleshoot and correct operational issues
• Demonstrates extensive experience in the implementation of information security (IS) best practices & performance of work in accordance with the Federal Information Security Modernization Act (FISMA)
• Demonstrates experience following configuration management processes
• Possesses excellent interpersonal skills and works well with team members and customer
• TrippLite serial consoles
• Ethernet & TDMA delivered Private IP & Internet circuits
• Cisco certification CCNA/CCNP
• Private APN cellular networks
• Network Time Protocol (NTP)
• 802.1X Network Access Control policies
• Cloud and Hybrid Cloud Networking
• Security Engineering
• Prior participation in ATO process
• Technical Writing and Documentation 

Skills

Required

• Cisco Firepower ASA firewalls
• AnyConnect VPN clients
• Cisco networking equipment
• Network engineering and operations
• Troubleshooting and diagnostics
• Information security best practices
• FISMA compliance
• Configuration management processes
• Interpersonal skills
• Communication skills

Preferred

• TrippLite serial consoles
• Cisco certification CCNA/CCNP
• Private APN cellular networks
• Network Time Protocol (NTP)
• 802.1X Network Access Control policies
• Cloud and Hybrid Cloud Networking
• Security Engineering
• Prior participation in ATO process