IP Network Test Engineer

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect protect and prepare individuals and teams for whatever comes next. Headquartered in McLean VA By Light supports defense civilian and commercial IT customers worldwide.

An IP Network Engineer assesses tests and recommends solutions and technologies to improve all aspects of DISN IP backbone. These technologies include network devices (routers switches firewalls and Intrusion Detection Systems (IDS) and services Authentication Authorization and Accounting (AAA) Access Control List (ACL) secure remote access (i.e Secure shell Secure VPN IPSec) and IPv6 capable devices.

An IP Network Engineer is responsible for all DISN aspects regarding the design review/recommendation lab testing evaluation/certification and implementation/deployment as well as provide Tier3 support for DoDs NIPRNet backbone network.

The position is onsite at Fort Meade MD.

• Provide technicalexpertise in design review lab testing& test report implementation plan and deployment of new advanced large-scale complex DoD networks.
• Implement MPLS services offerings on the DISN network. MPLS services include L3VPN L2VPN VPLS (Virtual Private LAN service) and CsC (Carrier Supporting Carrier). Platforms tested include Juniper MX Series Cisco ASR Series routers.
• Provide technical security expertise in design test evaluation and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET/SIPRNET network protection; Assess and analyze current NIPRNET/SIPRNET network architecture; Propose and analyze potential solutions.
• Conducting audits risk assessment threat analysis contingency planning and implementing security standards and methods.
• Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure architecture and technology and determines/implements effective countermeasures IAW established policies/regulations/directives.
• Delivers Router and Firewall Test Plans Test Reports as well as Implementation Plans to provide direction for deployment in the production environment. Prepare field recommendations and Configuration Guides.
• Provide Tier III engineering support to field operations personnel and deliver Field Support Lessons Learned reports.
• Conduct market research to find products to meet requirements.

• BS in Networking Telecommunications or related area required.
• CCNP-Enterprise or JNCIP-ENT or equivalent routing and switching experience.
• DoDM IAT Level I or higher to include one of the following: A CE CCNA-Security CND Network CE SSCP Security GSEC SCNP SSCP or CISSP.
• Extensive experience in IP networking including IP platforms such as customer edge routers provider edge routers switches firewalls Internet Access Points (IAPs) Cloud Access Points (CAPs) Layer 2 and Layer 3 Virtual Private Networks (L2VPN and L3VPN) Internet Protocol Version 4 (IPV4) Internet Protocol Version 6 (IPV6/6VPE) Ethernet VPN (EVPN) Quality of Service (QoS) Segment Routing Multiprotocol Label Switching (MPLS) Virtual Local Area Network (VLAN) Autonomous System Boundary Router (ABSR) external border gateway protocol (BGP) (eBGP) Layer 2 Psuedowire Interior Gateway Protocols (IGP) Inter- Intermediate System to Intermediate System (IS-IS) Open Shortest Path First (OSPF) MPLS Resource Reservation Protocol (RSVP) Label Distribution Protocol (LDP) Carrier servicing Carrier (CsC) Multicast Filter Based Forwarding (FBF) Multi-Hop Bidirectional Forwarding Detection (MBFD) Ethernet Operation Firewalls including Access Control List (ACL) Operation Administration and Maintenance (OAM) Protocol and Network Management. 802.1Q and VRRP/HSRP.
• Expertise in large-scale IP Networking & Testing with backbone routers (Juniper MX and Cisco ASR9K) running ISIS BGP/MP-BGP (multi AS) MPLS routing protocols switches and testing gear including traffic generators from IXIA Spirent Test Center and Agilent N2X.
• Routing protocols: BGP MP-BGP MPLS/RSVP OSPF IS-IS RIP Multicast IPv6 QoS MACSec.
• Advanced MPLS (Multiprotocol Label Switching) services (L3VPN L2VPN VPLS & CSC).
• TCP/IP LAN/WAN SONET ICMP and SNMP management protocols.

• CCIE or JNCIE or equivalent routing and switching experience.
• Hardware certification testing JUNOS/IOS/IOS-XR operating system regression testing which include all protocols and services required for DISN backbone routers. Router platforms include Juniper MX960/MX480 routers and Cisco ASR9K (ASR9010/ASR9006) routers.
• DISN IP Design Experience
• Network test equipment/Traffic Generator such as IXIA Spirent Test Center and Agilent N2X.
• Firewalls (Juniper/Netscreen Cisco ASA/PIX CyberGuard SideWinder) VPN products (IPSec SSL VPN).
• IDS/IPS (Arbor Peakflow DoS & Traffic Top Layer ForeScout).
• F5 Big-IP load balancer BlueCoat Web Proxy.
• Unix (SUN/HP/BSD) Servers/Workstations Linux PC Servers/Workstations
• VMWare ESXi server.
• JunOS Cisco IOS & IOS-XR UNIX (Sun Solaris BSD HPUX SCO) VMWare Linux FreeBSD Microsoft OS Servers and Workstations.
• Certificate Authority Server ACE/SecureID Server TACACS RADIUS MS Exchange Sendmail Apache web server PKI WINS DHCP DNS FTP/SFTP/TFTP SSH NTP Netflow/Cflowd servers.
• Possess excellent interpersonal communication skills with the ability to interact with management and staff at all levels.
• Candidate should also have excellent verbal and written communication skills.
• MS in Networking Telecommunications or related area desired

• Minimum SECRET Clearance required.

Salary Minimum: $150000

Salary Maximum: $250000

The annual base salary provided is a guideline for this position and is not a guarantee of compensation or salary. When extending an offer By Light also considers other variables such as (but not limited to) work experience education training skill set internal peer equity clearance level and market addition By Light provides an extensive selection of benefits and offerings to our employees.