SD-WAN Engineer with Security Clearance

SD WAN Engineer for a DoD customer on Fort Mead. Job Description:
Cisco SD-WAN Engineer on the DISA Defense Red Switch Network team in support of an enterprise VoIP management system - GSM-O II contract at Fort Meade, MD. The successful candidate will have a Cisco SD-WAN background responsible for the design, document, test, deployment and maintenance of SD-WAN solutions within an enterprise environment on a high-paced, fast-moving program. As a Cisco SD-WAN Engineer, you will be a part of a team that interacts with both technical and non-technical stakeholders, including customers and vendors but primarily with internal teammates. In this role, the candidate will be a subject matter expert (SME) in Cisco SD-WAN technologies, ensuring optimal performance, security, and scalability of WAN infrastructure across multiple environments (DEV/TEST and Production). The candidate will also provide technical assistance, administer configurations, upgrade software, develop and/or update related documentation, ensure applicable STIGs are applied and documented, conduct and support testing on work performed, recommend enhancements, and troubleshoot and resolve issues associated to Cisco Catalyst SD-WAN infrastructure and various network components. Responsibilities:

• Design, configure, deploy and manage Cisco SD-WAN solutions (Cisco Catalyst SD-WAN formerly known as Viptela or Meraki)

• Work closely with DRSN engineers and site personnel for coordinating deployments and maintenance actions.

• Evaluate system network requirements and make appropriate technical recommendations.

• Provide expertise in SD-WAN overlay/underlay networking, including BGP, OSPF, IPSec tunnels, and application-aware routing.

• Implement and maintain Cisco Catalyst SD-WAN Manager/vManage, Cisco Catalyst SD-WAN Controller/vSmart, Cisco Catalyst SD-WAN Validator/vBond, and Edge routers.

• Configure and manage Quality of Service (QoS), security policies, and segmentation within the SD-WAN fabric.

• Assist IA personnel regard network security and compliance requirements.

• Perform installation, testing, and validation of network components both remotely and on-site.

• Monitor network performance, troubleshoot SD-WAN related issues, and optimize WAN connectivity.

• Document network architecture, configurations, and best practices.

• Support deployments, upgrades, and migrations as required.
Additional Skills & Qualifications

• Bachelor's degree and 12+ years of overall related experience or Master with 10+ years. Specific experience, education and training may be considered in lieu of degree.

• Experience in remotely configuring networking or transport devices.

• Strong experience with Cisco SD-WAN (Cisco Catalyst SD-WAN/Viptela or Meraki)

• Expertise in routing protocols (BGP,OSPF,EIGRP) and WAN technologies.

• Ability to interpret network topology diagrams and implement configuration changes.

• Experience in in-band and out-of-band network management.

• Strong knowledge of VPN, IPSec, and on-premises deployment of SD-WAN Infrastructure.

• Security+ Certification.

• Must possess an active Top Secret with SCI eligibility clearance.

• Must possess current DoD 8570 certification at IAT level II (Security+CE)

• Proficiency with Cisco IOS-XE, vManage, and Network automation tools.

• Basic Linux Administration or command line interface (CLI) experience. Desired Skills:

• Cisco CCNP Enterprise or CCNP Security certification.

• Experience managing configuration using Cisco DNA Center, Cisco Catalyst SD-WAN Manager

• Hands-on experience with SD-WAN policy-based routing, traffic engineering, and performance monitoring.

• Experience in network security protocols, TLS, PKI, and Zero Trust models.

• Proficiency with network management tools such as SolarWinds or Splunk.

• Proficiency in at least two or more of the following devices: Cisco Catalyst 8300, Cisco Catalyst 8500, Cisco 1000 ISRs, General Dynamic KG175

• Proficiency in at least one of the following tools: SolarWinds or Junos Space

• JNCIA or JNCIP

• Proficiency with RADIUS, SNMP, and NTP protocols

• General knowledge of TLS and PKI