Senior Network Engineer at SOSi in Joint Base Pearl Harbor Hickam, HI, United States

Job description

• Engineer the Edge of Mission-Driven Innovation in Hawaii 🌐🌴
• SOSi is seeking a forward-thinking Senior Network Engineer to join our elite team at Joint Base Pearl Harbor Hickam in Honolulu. Here, you’ll architect and support cutting-edge IT solutions that empower over 5,000 users across the Pacific theater. From enabling time-sensitive Command and Control (C2) strategies to solving complex technical challenges, your work will directly impact national security and global readiness.
• If you're ready to engineer resilience where mission meets momentum—this is your next move.

Responsibilities

• As a Senior Network Engineer at SOSi, you will serve as a Subject Matter Expert (SME) for network/transport (LAN/BAN/WAN) initiatives within the customer's Area-of-Responsibility (AOR). Your role includes conducting network systems analysis and recommendations, configuring Layer-2/Layer-3 devices, implementing approved changes on the production enterprise/data center networks, and coordinating and participating in the customer's IT architecture/engineering efforts alongside the Systems Engineering, Systems Operations, Network Operations, and the Enterprise Service Desk (ESD) teams.
• Design, develop, and implement approved LAN/WAN/cryptographic architectures to support data integration plans. Determine functional testing strategy and document results.
• Design, develop and implement (NSA) approved Commercial Solutions for Classified (CSfC) capability packages and approved encryption methods.
• Configures, supports, and troubleshoots External Border Gateway Protocol (eBGP) routing within a Palo Alto environment.
• Provides Tier-3 support to network-related issues.
• Reviews and troubleshoots network, transport, and protocol related issues.
• Acts as a point of incident escalation and coverage.
• Develops, documents, and standardizes network configurations.
• Performs network discovery and assessment: inventories & identifies network architecture and components (e.g., network devices, IOS versions, device capabilities/configurations, IP addresses/subnets, VPNs, circuit information, WAN protocols etc.).
• Employ scripts and related network tools to automate data-collection of networking components and relevant network device configurations.
• Coordinates internal and external resources relevant to network and secure transport engineering initiatives.
• Reviews Customer requirements and recommends solutions to include List of Materials (LOM), proposals and related supporting documents (e.g., solution diagrams, implementation timelines, etc.)
• Interact with circuit providers (e.g., DISA) and manage (coordinate) required circuit actions.
• Upholds the integrity and security of network devices and systems according to Department of Defense (DoD) Secure Technical Implementation Guidelines (STIGs).
• Reviews work efforts/implementations and contributes to analysis, After-Action-Reports (AAR).
• Regularly collects and summarizes pertinent network-related accomplishments, issues, and concerns.
• Completes activity reports in accordance with contract requirements.
• Ensures compliance of custody and ownership of Government equipment and related components.
• Participates in related solution technologies and special projects, as required.

Requirements

• An Active in-scope TOP SECRET clearance with SCI eligibility.
• Bachelors degree in IT, Networking, or similar or 8+ years of experience in enterprise IT network engineering and operations involving complex classified DoD environments and mandatory security controls (e.g., STIGs).
• 5+ years implementation and support to Layer-3 networking.
• Extensive experience with Cisco’s routing and switching portfolio.
• Prior experience in implementing and supporting DoD secure network environments (firewalls, encryption/SSL, network separation, VLANs, tunnels, TACLANES etc.)
• 3+ years firewall experience and highly familiar with firewall implementation, routing, protocol analysis and troubleshooting.
• DoD 8570 IAT-II compliant (Security+ CE, CCNA, CND, CySA+, GICSP, GSEC, or SSCP).
• Cisco Certified Network Professional (CCNP) Enterprise or Security certification.
• Team-player, attention to detail, and able to communicate effectively, verbally and in writing.
• Excellent planning and time-management skills.
• Prior experience with NSA CSfC requirements including Multi-Site Connectivity Capability Package (MSCCP) and Mobile Access Capability Package (MACP).
• Prior experience with Cross Domain Solutions (CDS) and/or DISA Trusted Network Environment (TNE)
• Customer-service oriented with a willingness to participate and assist.
• Able to support 24/7 operations (including support to exercises), when necessary.
• Able to follow instructions and work both independently and in a (distributed) team environment.
• Cisco Certified Internetwork Expert (CCIE) certification or higher.
• Additional IT certifications in relevant technology platform (e.g., Cisco, Citrix, Dell, HPE/Aruba, ITIL, Juniper, Microsoft, Nutanix, Palo Alto, VMware)
• Prior experience with Palo Alto Network Security Platform and/or Cisco Secure portfolio.
• Prior experience with Forcepoint, Brocade, and/or Juniper technologies.
• Familiarity with Zero Trust Architecture (ZTA).
• Familiarity with VDI/Virtual Environments and solutions (VMware Horizon, Citrix VDI)
• Familiarity with Hyperconverged Infrastructure (HCI), Multi-factor Authentication (MFA) and C2 applications.
• Experience in ITIL framework and best practices (e.g., Change Management, Configuration Management, Capacity Planning)
• Prior Help Desk/software experience (e.g., Jira, Remedy, ServiceNow).

Skills

Required

• Layer-3 networking
• Cisco routing and switching
• eBGP routing
• Palo Alto environment
• Network security (STIGs)
• Network analysis and troubleshooting
• Scripting and network automation tools
• Team-player
• Attention to detail
• Planning and time-management
• Customer-service oriented
• Ability to support 24/7 operations

Preferred

• Palo Alto Network Security Platform
• Cisco Secure portfolio
• Zero Trust Architecture (ZTA)
• Hyperconverged Infrastructure (HCI)
• Multi-factor Authentication (MFA)
• C2 applications
• ITIL framework and best practices