MSM Technology
Network Engineer
MSM Technology
We are seeking a Network Engineer to support a federal customer. In this role you will:
Provide network architectural design, modeling, engineering, implementation, sustainment, migration, technical refresh, and lifecycle services for the DISA Datacenter and Cloud enterprise network infrastructure. Network services and products supported shall include routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, LAN, WAN, protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. Contractor shall support Intrusion Detection Systems (IDS) and other network defense architectures in support of cyber defense operations.
Provide design solutions, implementation guides using DoD and Industry best practices. Contractor is responsible for service transition to operations and references ITIL Framework.
Provide/support implementation solution documents for configuration and maintenance of DISA hosted Application Delivery Controllers including F5 BIG‑IP Local Traffic Manager (LTM), Global Traffic Manager (GTM), and Access Policy Manager (APM).
Design solution documentation outlining licensing, physical architecture, logical configuration, eligibility, checklist application inventory, security policy protection phases, and basic administration, including system configuration baseline and security policy baseline.
Build, implement, and document network enabled applications considering infrastructure requirements, security, and application performance needs and best practices.
Assume responsibility for all lifecycle components’ compliance with security controls, including confidentiality, integrity, and availability and compliance with Security Technical Implementation Guidelines (STIG) in depth.
Engineer and implement network architectural changes in response to future technology enhancements, DISA customer requirements, security requirements and enhancements, technical refresh efforts, lifecycle requirements, or changes in network capacity requirements.
Prepare and solution design/technical documentation to include whitepapers, briefings, and other required documents to support all engineering and implementation efforts with established policy and processes.
Adhere to DISA enterprise network standards, leading technical working groups, conducting product evaluations, developing recommendations, and preparing and presenting briefings.
Ensure all engineering and implementation efforts adhere to DISA and DoD policies, and directives from United States Cyber Command (USCC) and Joint Force Headquarters DODIN (JFHQ‑DODIN).
Qualifications
Must have an active SECRET or higher security clearance.
5+ years of relevant experience with design and implementation of complex Datacenter and Enterprise Network infrastructure in a multi‑vendor environment.
DoD 8570.01‑M/8140.01 IAT Level II Certification (Security+, CySA+, etc.).
Relevant secondary certification (Cisco, F5, Juniper, Palo Alto, Cloud, etc.).
Excellent verbal and written communication skills.
Preferred Skills
IT bachelor’s degree or Vendor Network Certification (Professional or higher).
Strong and extensive knowledge of datacenter‑based network methods, protocols and technologies to include:
Routing (BGP, OSPF, MP‑BGP, MPLS, VPN, Multicast, PBR).
Switching (RSTP, VLAN, VXLAN, LLDP, VPC, LACP, LAG).
TCP/IP, IPv4, IPv6, UDP, Layer 1 through Layer 7, IPSEC, HAIPE.
Firewalls (VPN, ACLs, Whitelisting).
Load balancing (APM, ASM, LTM, GTM).
SDN/NFV/IAC (ACI, Service Insertion, Ansible).
Identity and Access Management with RBAC (AAA, RADIUS, TACACS, LDAP).
Network management and analysis (Performance Manager, Juniper Space, Cisco ISE, Splunk).
Structured cabling and installation standards.
Application of network security and design practices.
Cloud management (AWS, Azure).
Knowledge in software modules to include: F5 BIG‑IP LTM, GTM, APM, ASM.
Proficiency in use of government systems to track ops and management of systems and performance including ITSM, GTMS, Ansible, ServiceNow, Microsoft 365.
Employment type: Full‑time
Location: San Antonio, Texas Metropolitan Area
#J-18808-Ljbffr
We are seeking a Network Engineer to support a federal customer. In this role you will:
Provide network architectural design, modeling, engineering, implementation, sustainment, migration, technical refresh, and lifecycle services for the DISA Datacenter and Cloud enterprise network infrastructure. Network services and products supported shall include routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, LAN, WAN, protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. Contractor shall support Intrusion Detection Systems (IDS) and other network defense architectures in support of cyber defense operations.
Provide design solutions, implementation guides using DoD and Industry best practices. Contractor is responsible for service transition to operations and references ITIL Framework.
Provide/support implementation solution documents for configuration and maintenance of DISA hosted Application Delivery Controllers including F5 BIG‑IP Local Traffic Manager (LTM), Global Traffic Manager (GTM), and Access Policy Manager (APM).
Design solution documentation outlining licensing, physical architecture, logical configuration, eligibility, checklist application inventory, security policy protection phases, and basic administration, including system configuration baseline and security policy baseline.
Build, implement, and document network enabled applications considering infrastructure requirements, security, and application performance needs and best practices.
Assume responsibility for all lifecycle components’ compliance with security controls, including confidentiality, integrity, and availability and compliance with Security Technical Implementation Guidelines (STIG) in depth.
Engineer and implement network architectural changes in response to future technology enhancements, DISA customer requirements, security requirements and enhancements, technical refresh efforts, lifecycle requirements, or changes in network capacity requirements.
Prepare and solution design/technical documentation to include whitepapers, briefings, and other required documents to support all engineering and implementation efforts with established policy and processes.
Adhere to DISA enterprise network standards, leading technical working groups, conducting product evaluations, developing recommendations, and preparing and presenting briefings.
Ensure all engineering and implementation efforts adhere to DISA and DoD policies, and directives from United States Cyber Command (USCC) and Joint Force Headquarters DODIN (JFHQ‑DODIN).
Qualifications
Must have an active SECRET or higher security clearance.
5+ years of relevant experience with design and implementation of complex Datacenter and Enterprise Network infrastructure in a multi‑vendor environment.
DoD 8570.01‑M/8140.01 IAT Level II Certification (Security+, CySA+, etc.).
Relevant secondary certification (Cisco, F5, Juniper, Palo Alto, Cloud, etc.).
Excellent verbal and written communication skills.
Preferred Skills
IT bachelor’s degree or Vendor Network Certification (Professional or higher).
Strong and extensive knowledge of datacenter‑based network methods, protocols and technologies to include:
Routing (BGP, OSPF, MP‑BGP, MPLS, VPN, Multicast, PBR).
Switching (RSTP, VLAN, VXLAN, LLDP, VPC, LACP, LAG).
TCP/IP, IPv4, IPv6, UDP, Layer 1 through Layer 7, IPSEC, HAIPE.
Firewalls (VPN, ACLs, Whitelisting).
Load balancing (APM, ASM, LTM, GTM).
SDN/NFV/IAC (ACI, Service Insertion, Ansible).
Identity and Access Management with RBAC (AAA, RADIUS, TACACS, LDAP).
Network management and analysis (Performance Manager, Juniper Space, Cisco ISE, Splunk).
Structured cabling and installation standards.
Application of network security and design practices.
Cloud management (AWS, Azure).
Knowledge in software modules to include: F5 BIG‑IP LTM, GTM, APM, ASM.
Proficiency in use of government systems to track ops and management of systems and performance including ITSM, GTMS, Ansible, ServiceNow, Microsoft 365.
Employment type: Full‑time
Location: San Antonio, Texas Metropolitan Area
#J-18808-Ljbffr