Network Engineer with Security Clearance

Primary Responsibilities
- Serve as a technical member on projects that contain moderate to highly complex environments, utilizing high availability concepts.
- Develop and implement project plans within budgetary, schedule and resource constraints.
- Collaborate with other members of the Engineering team in the development of technical design solutions.
- Capture, analyze, decompose and create requirements for network systems, products and subsystems of moderate complexity.
- Use an interdisciplinary approach, focusing on customer needs and business requirements, to design, develop, document, test and maintain network systems ranging from the straightforward to moderately complex.
- Author, review and maintain documentation during all phases of the system design life cycle as appropriate and specified within documented process and procedure (Project Plans, Estimates, Requirements Documentation, Operational Scenarios, Design Documentation and Drawings, Sys Acceptance Test Plans, etc ).
- Apply Security/Cybersecurity methodologies to network and systems design to provide secure services that support business requirements.
- Configuration and installation various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS, ACL).
- Provide post-fielding support, resolving operational issues involving L2 and L3, in a multi-routing network infrastructure

Basic Qualifications
- Ability to adapt to changing priorities and maintain a productive and committed work effort, meeting deadlines and managing workload.
- Must be able to use independent judgment to make decisions in day-to-day job responsibilities the majority of the time, under general supervision.
- Must possess excellent communication skills with a demonstrated ability to articulate ideas in both business and technical terms (both verbal and written) according to the audience, securing and sustaining their buy-in.
- Must be able to clearly depict and convey understanding of technical design using a wide range of design notations and artifacts, as applicable to the audience.
- Experience providing solutions and implementing infrastructures requiring 100% availability, near zero latency, low jitter and response times.
- Demonstrated Cisco experience along with related experience in Infrastructure/Networked environments with hardware (routers, switches, firewall, etc), designing, planning and implementing LAN-WANs using the industry standard technologies.
- Understanding of IP Networks, security and network management concepts.
- Demonstrated knowledge in the following areas:

• TCP/IP:
o TCP three way hand shake: basic understanding of: (SYN, SYN ACK, ACK, FIN, RST, PUSH)
o IPv4, VLSM be able to understand IPv4 subnetting
o IPv6 address format
o UDP vs TCP (connectionless vs connection oriented)
o OSI model:
o Overall understanding of L1 - L7

• Routing:
o BGP: Basic understanding of iBGP vs eBGP and configuration workflow
o OSPF: Network Types: (basic understanding of LSA types 1 - 8)

• L2 Switching:
o VLANs (Understand how to configure VLAN IDs, name, etc.)
o STP: Basic understanding of STP order of operation (Blocking, listening, learning, forwarding) and applying different types on the switches (portfast edge, portfast trunk)
o 802.1Q: Basic understanding of trunk port(s) allowing all VLANs vs specific VLANs

• Tunneling/Encapsulation mechanisms:
o GRE: Be able to configure point-to-point or point to multi-point GRE tunnels

• VPN:
o PTP/Site to Site IPSec: Be able to setup/configure site-site VPN
o Basic understanding of DMVPN

• Troubleshooting:

• L1: Fiber optics: SM vs Multimode

• Optic modules: SFP, QSFP, QSFP+

• RJ-45 (CAT-5, CAT-6, CAT-6e, CAT-7)

• L3: Packet and Protocol Inspection concepts and application

• Ability to read and interpret packet captures
o Wireshark
o TCPDUMP

• Setup a monitor session (SPAN)

Desired Qualifications
- Understanding of formal configuration management processes. Working knowledge of automation and configuration management leveraging tools such as Ansible.
- Demonstrated understanding of project life cycle support, including requirements development, analysis, design, test, implementation and post fielding support.
- Knowledge of VoIP Telephony and of SIP with experience in voice network design to include SIP and QOS configurations.
- Ability to take the initiative in driving technical discussions with the relevant parties and not wait to be invited.
- Knowledge of the Airport and Air Transport Industry domain s is desirable.
- A career path that has provided exposure to and experience of employing a broad spectrum of network and infrastructure technologies.
- Education or Certification Requirements
- 5 or more years of network design and engineering experience through all phases of the SDLC life cycle and with demonstrated knowledge of core Network, Capacity and Performance Management technologies and applications. Required: Bachelor of Science in Science, Technology, Engineering or Mathematics (STEM) or related field. Desired: Active CCNA or CCNP certification, CompTIA Network+, JNCIA, PCNSE Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)