Network Engineer

What Youll Do

We are seeking a highly motivated and experienced Network Engineer to join our dynamic Information Technology (IT) team. As a Network Engineer you will be integral to a national security mission focused on maintaining the safety security and effectiveness of the United States nuclear weapons stockpile. Operating within the Network Operations team of the Information Technology (IT) organization this role involves designing implementing and managing complex network architectures ensuring high availability performance and security. The ideal candidate will have a strong understanding of network infrastructure security and troubleshooting with a proven track record of maintaining and optimizing complex network environments. This role requires a professional who can balance day-to-day operational support with involvement in network modernization initiatives.

Responsibilities:

• Administer and maintain enterprise networks including configuring and lifecycle management of network devices such as routers switches firewalls virtual private network (VPN)s and wireless infrastructure.
• Perform network maintenance and system upgrades including service packs patches hotfixes and security configurations.
• Monitor network performance and integrity ensuring the stability reliability and security of the network.
• Troubleshoot and resolve complex network issues in a timely manner.
• Implement and manage next-generation firewall platforms (e.g. Palo Alto) including high availability configuration secure sockets layer (SSL) decryption policy optimization and intrusion detection/prevention systems (IDS/IPS).
• Develop and deploy scalable and resilient network architectures to support high availability fault tolerance and future growth.
• Engineer and support complex routing strategies using protocols such as EnhancedInteriorGatewayRoutingProtocol (EIGRP) Open Shortest Path First (OSPF) and Border Gateway Protocol (BGP) ensuring optimal route redistribution convergence and path selection.
• Design deploy and manage hybrid network topologies including integration with cloud environments (e.g. Microsoft Azure Virtual Networks ExpressRoute peering).
• Support the implementation and management of Network Access Control (NAC) solutions (e.g. Cisco Identity Services Engine (ISE) for endpoint compliance and identity-based access control.
• Administer monitor and support Cisco Unified Communications Manager (CUCM) Cisco Unity Connection and other Cisco Voice over Internet Protocol (VoIP) systems including voice gateways internet protocol (IP) phones and their associated infrastructure to ensure reliable communication services.
• Deploy configure and maintain Cisco wireless network infrastructure including wireless Local Area Network (LAN) controllers (WLCs) and access points to ensure seamless and secure wireless connectivity.
• Maintain accurate technical documentation including topology diagrams configuration baselines IP address management and change control records.
• Collaborate with other IT disciplines including cloud systems and security teams to deliver integrated solutions.
• Provide technical leadership and mentorship to junior technical staff as needed.

Minimum Job Requirements

Department of Energy (DOE) Order 426.2A Requirements

• Not applicable

Preferred Job Requirements

• Bachelors degree in engineering/science/information technology discipline with a minimum of four years of relevant experience or a Masters degree in engineering/science/information technology discipline with a minimum of two years of relevant experience.
• Network Infrastructure Management: In-depth knowledge and hands-on experience in the implementation configuration and maintenance of network software and hardware. This includes managing both existing infrastructure and contributing to the deployment of new solutions.
• Network Security Operations: Strong understanding of network security principles and practices for securing applications and environments. Stays current on IT vulnerabilities and countermeasures actively implementing and maintaining security protections across all networked devices such as switches routers and firewalls.3
• Effective Communication & Collaboration: Exceptional communication skills with the ability to effectively collaborate with customers vendors and technical personnel across various departments and organizations.
• Problem Solving & Technical Documentation: Ability to clearly and effectively present complex technical and operational information both verbally and in writing solve intricate technical problems and maintain vigilance regarding changes that may impact system security and operational integrity. This includes producing and maintaining accurate network documentation.34
• Demonstrated Technical Expertise: Proven hands-on experience in the following areas:
  • Cisco Switches / Routers (configuration troubleshooting and maintenance)
  • Palo Alto Firewalls (configuration policy management and troubleshooting)
  • Cisco ASA / FirePower (implementation and support)
  • Cisco VoIP (administration monitoring and troubleshooting of Cisco Unified Communications Manager (CUCM) Cisco Unity Connection and related components)
  • Cisco ISE (implementation and management of Network Access Control solutions for endpoint compliance and identity-based access)
  • Cisco Wireless (deployment configuration and maintenance of Cisco wireless network infrastructure including Wireless LAN Controllers (WLCs) and access points)
  • Programming/scripting languages such as Perl or Python for network automation and configuration tasks.
• Active Listening - Exceptional listening skills to give focused attention to what other people are saying taking time to understand the points being made asking questions as appropriate and not interrupting at inappropriate times.
• Speaking - Strong communication skills to talk to others and convey information effectively.
• Writing - Exceptional skills to communicate effectively in writing as appropriate for the needs of the audience.