Network Engineer with Security Clearance

Scope of Work:
Network Engineer shall provide services necessary to monitor, maintain, troubleshoot, and update the network infrastructure to support daily operations as well as implement band-width upgrades to its long-haul communication circuits located at the following sites:

• Headquarters (HQ) at Point Mugu Naval Air Station, CA

• Laguna Peak (LP) at Laguna Peak (Point Mugu) Naval Air Station, CA

• Detachment Delta (Det D) at Schriever Air Force Base (SAFB), CO

• Detachment Alfa (Det A) at Prospect Harbor, Maine

• Detachment Charlie (Det C) at Finegayan, Guam
All network devices are remotely accessible from NAVSOC Headquarters at Point Mugu Naval Air Station, CA.
1. Performance Requirements:
The contractor shall:
a. Install, configure, and maintain Solar Winds Software Government Furnished Equipment (GFE) for monitoring network infrastructure. Create and maintain a standard operation procedure in the onsite wiki describing how to monitor the ISCS network utilizing the Solar Winds software.
b. Perform daily (business-days) monitoring of network and identify any degradation or anomalies using Solar Winds Provide an initial verbal report to government within 1 hour of discovery., followed by a written report (may be email) with sufficient detail to describe the cause for degradation or anomaly along with proposed corrective actions within 1 business day. c.Troubleshoot, develop, and recommend to N6 any corrective actions required to maintain networking services.
Performance Standards: N6 is notified of recommended actions within 1 working day of finalizing the recommendations.
d.Implement government approved corrective action(s) in accordance with approved schedule.
Performance Standards: Corrective actions are implemented within approved schedule time frame.
e.Analyze network performance and provide recommendations to N6 for performance improvements and resiliency of networking infrastructure quarterly.
Performance Standards: Analysis are completed and provided within 10 working days of the end of quarter.
f.Implement approved changes to network components. This includes: installation, upgrade,configuration changes, firmware/IOS updates, Security Technical Implementation Guide (STIG)changes, security changes (including ACL changes), VLAN changes, port lock/unlock, routing changes, band-width changes, failover/redundancy changes, integration of new circuits, and loadbalancing. DoD mandated security changes typically occur every 3 months; but may be more frequent in the event of immediate tasking received by the DoD to implement security changes.
g.Remove and install GFE when upgrades, tech refresh, or failed units require replacement.Government estimates no more than 2 per year.
h.Design and configure networking infrastructure components to accommodate planned upgrades of bandwidth to all detachments. Nine (9) new long-haul circuits need to have network components configured and verified; these will need to be integrated with Department of Defense (DoD) Type-1 encryption devices; these typically require Generic Routing Encapsulation (GRE) Tunnels.Contractor will be responsible for configuration and troubleshooting of networking interfaces of these Type-1 encryption devices. The 9 circuit end-points are as follows:
i.HQ to SAFB, CO (Mod 3/4): 2 Circuits
ii.HQ to SAFB, CO (Mod 19): 1 Circuit
iii.HQ to Det A, Prospect Harbor, ME: 1 Circuit
iv.HQ to Det C, Finegayan, Guam: 1 Circuit
v.HQ to North Island, San Diego, CA: 1 Circuit
vi.HQ to Vandenberg Air Force Base, CA: 1 Circuit
vii.SAFB, CO (Mod 19) to Det A, Prospect Harbor, ME: 1 Circuit
viii.SAFB, CO (Mod 19) to Det C, Finegayan, Guam: 1 Circuit
i.Follow NAVSOC Configuration Management Plan for pre-authorization of changes,documentation of configuration changes, and implementation of system changes. Updateconfiguration documentation and drawings describing the configuration, operation, andtroubleshooting techniques of networking components.
Audit and update network topology documentation. Conduct initial baseline operational audit,update existing topology documentation and drawings, and update configuration scripts.
j.Submit downtime requests for planned system changes and maintenance activities prior to missionplanning cycle (typically 2.5 weeks in advance). Urgent downtimes that cannot be submitted perthe mission planning cycle shall be manually routed by the Contractor; usually due to unexpectedor unplanned events.
k.Develop a coordinated installation plan to be approved by the government before installationsoccur; as NAVSOC must still perform mission while installations proceed; each plan shall include
at a minimum: start and end date and time, test plan for ensuring devices are operating as expected after installation upgrade, and a specified time to allow the Government to run satellite test supports to verify system availability is as expected (typically 2-4 hours).
l. Follow the Defense Information Systems Agency (DISA) Security Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs) securing the configuration of network devices installed.
m. Implement quarterly password changes in coordination with a government representative.
n. Label network cables identifying origin and destination at both ends. Label network routers and switches.
o. Maintain the network cable infrastructure, remove unneeded cables, and utilize industry best practices for cable management to include clean cable runs, ties, and strain relief.