Network Engineer at ITC Federal in US-MD-Fort Meade

Job description

• CERTIFICATION REQUIREMENT: Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, or equivalent) required.
• ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.
• This position will be an experienced technical resource for the ongoing deployment and sustainment of a Commercial Solutions for Classified (CSfC) solution at Fort Meade, MD. This Network Engineer role requires a strong operational background supporting network infrastructure hardware, VPN solutions, packet filtering and firewalling techniques, routing and switching, and troubleshooting. Technologies deployed within the solution include platforms such as Cisco FTD & ASA, Palo Alto Firewalls, Aruba vMC, VMware vSphere, Cisco Catalyst switching platforms, and other logging, monitoring, and security solutions.
• Expectations of this role are to implement, maintain, and optimize network, firewall, and VPN infrastructure, perform new installations, troubleshoot complex nested VPN connectivity, and resolve network connectivity issues. The ideal candidate can support, manage, and maintain multiple network enclaves and elements, as well as design, optimize, and automate network operations. This role supports a solution that remains functional 24x7x365 and is embedded within the client's secure location, so a professional approach to troubleshooting and operational security is paramount.

Responsibilities

• Provide deep hands-on support for network routers, switches, firewalls, and VPN termination appliances (both site-to-site and remote access IKEv2 VPNs).
• Plan and perform platform-level software updates and disaster recovery operations.
• Perform installation of new capability integrations and configuration of network segments with a security-first approach.
• Perform testing and documentation to report systems status and support operations.
• Diagnose, troubleshoot, and resolve hardware, software, or other network problems, and replace defective components when necessary.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Collaborate on a multi-disciplinary team of software, test, server engineers, and operations staff.
• Provide 24x7 on-call Tier 3 escalation support for network, network security, VPN, and infrastructure outages.
• Perform other duties as required in support of the customer's mission.

Requirements

• 7+ years of network engineering experience supporting large-scale global environments.
• Bachelor's degree in Computer Science, Engineering, or an IT-related discipline, or equivalent years of related technical experience.
• Active Federal SECRET Security Clearance.
• Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, or equivalent).
• Networking knowledge: VLANs, access control, trunking, static/dynamic routing (BGP, EIGRP, OSPF), IKEv2 IPsec VPNs (site-to-site and remote access), PKI, DNS, SNMP, packet filtering, and packet analysis tools.
• Excellent written and verbal communication and organizational skills.
• Current, active professional networking/security certifications (Cisco, Juniper, Aruba, Palo Alto, Fortinet).
• Direct hands-on experience with Cisco, Juniper, or Palo Alto IPS platforms and capabilities.
• Knowledge of automation strategies (Ansible, Terraform, Python/Bash/PowerShell scripting) and techniques for provisioning and operating network devices.
• Experience supporting enterprise SIEM and observability tooling.
• Experience in Commercial Solutions for Classified (CSfC) environments.
• Prior lead or management experience preferred.

Skills

Required

• Cisco FTD & ASA
• Palo Alto Firewalls
• Aruba vMC
• VMware vSphere
• Cisco Catalyst switching platforms
• VPN solutions (IKEv2 IPsec)
• Packet filtering and firewalling
• Routing and switching (BGP, EIGRP, OSPF)
• PKI, DNS, SNMP
• Packet analysis tools
• SIEM and observability tooling