Sign-on Bonus Eligible!- Principal Network Engineer

The mission of the Lone Wolf program is to support, operate , and maintain the Distributed Continuity Integrated Network - Top Secret Enterprise Services (DCIN-TS ES) which is a DoD-provided, TS/SCI, integrated voice, video, and data, global communications network that facilitates collaboration among senior leaders and key staff. The Lone Wolf program boasts a professional workforce comprised of specialists throughout the Information Technology lifecycle and who contribute to a positive work environment.

The Lone Wolf Team is Mission Focused, Customer Oriented, Process Guided, and Solutions Driven. Candidates interested in joining the team must be critical thinkers, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment that supports a critical and rewarding mission. We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes. The Team is expected to grow and is looking for people who can apply disciplined processes and provide imaginative solutions that enable the adoption of innovation and emerging technologies that create opportunities for transformative change.

Responsibilities:

The duties and responsibilities of the Principal Network Engineer include, but are not limited to, the following:

Perform as primary Subject Matter Expert to Government Leaders with knowledge and experience in local and wide area networking, communications, data center operations and related software/hardware within a multi-platform operating environment.

Manage team of 10-15 Network Engineers in both operation and maintenance of existing enterprises as well as development and integration of emerging capabilities.

Ensure engineering rigor to manage multiple projects and initiatives using an industry accepted systems development life cycle model ( i.e. INCOSE V, Waterfall, etc.)

Provide support to a wide array of customers as part of a complex team of multiple contractors and government personnel.

Provide support for all information systems operations activities, including computer and communications operations, data control, LAN/WAN administration and operations support, operating systems programming, system security policy procedures, and operations.

Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.

Provide recommendations and conduct research for new technologies , future concepts, and analysis for implementation of deployable solutions (mobile and transportable) design integration, Interoperability of systems and services with mission partners, and Virtualization and Software Defined Networking (SDN) design integration.

Review site design packages from the Site Design team for technical accuracy.

Design and plan network communications systems.

Research and recommend to the Configuration Management Board new or replacement models of hardware or software to support the engineering roadmap.

Provide information to the life cycle team for hardware that is reaching end of life or end of service/support.

Coordinate with the Information Assurance Security Engineers to validate all designs against required security controls to maintain Authority to Operate of each enclave.

Create, review, and update technical documentation in support of integration projects.

Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.

Provide engineering support to the Network Operations Center, and support implementation and sustainment teams as needed.

Identify and diagnose complex performance, security, and technical issues.

Develop and implement solutions across a wide range of technologies.

Implement and maintain DISA STIG requirements.

Stay current on most technological developments and applications and help to evaluate vendor products to make recommendations for purchase.

Supervision and management tasks:

Oversees the day-to-day O&M management of all enterprise network connectivity and data center network infrastructure operations, policies, and procedures.

Analyzes and resolves network and data center work problems, or assists employees in solving work problems

Leads enhancement efforts to deliver new techniques/solutions to optimize and secure infrastructure and monitoring systems.

Confers and works efficiently and effectively with other departments to plan and deliver enhancement projects, operational changes, and related schedules, resources and progress reporting

Responsible for O&M’s team’s troubleshooting efforts to isolate and diagnose common system problems; documents system events to ensure continuous functioning.

Train, mentor and motivate team to meet individual, team and contractual obligations and thresholds while ensuring individual career growth and development.

Devises new techniques to expedite workflow, improve productivity, and improve operating environment.

Must have active Top-Secret clearance with SCI or the ability to acquire Top Secret/SCI

15+ years of experience in network and data center architecture design and management with at least 3 years focused on implementing Cisco ACI and Next Generation Firewalls (NGFW) solutions (Cisco Firepower and Palo Alto PAN-OS/Panorama)

Prior experience serving as Lead Engineer engaging with Senior Government Technical Personnel to communicate design solutions and O&M activities.

Min 5 years’ experience directing cross-functional engineering teams to deliver full lifecycle support for IT infrastructure, O&M activities, and documenting system performance to ensure continuous function.

Demonstrated experience with the following:

Design of highly available /high performance/highly scalable redundant networks and ISP management

SDWAN implementation

IPAM

IPv6 design and deployment at the enterprise and data center

Implementing Cisco Nexus Dashboard and ACI fabric architectures (VXLAN, Spine-Leaf topology, and APIC controller management) for multi-data center environment, to include:

D esign and optimization of ACI fabric and spine-leaf architecture

C onfiguring tenant policies, endpoint groups (EPGs), and implementing ACI contracts, filters, service graphs, and L4-L7 integrations with firewalls and load balancers

D eveloping automation scripts using Python, Ansible, or Terraform for network configuration and policy enforcement application profiles

Integrate ACI with multi-datacenter environments for VMware and Acropolis AOS VM environments.

Implement Zero Trust Security policies within ACI and ensure compliance with industry standards

Use APIC, SNMP, Syslog, and telemetry tools for proactive monitoring and performance tuning

Implementing Cisco Data Center solutions - Nexus switches (9K series), UCS, BE7K and data center management planes

Experience designing and troubleshooting Layer 2/3 networking architectures and understanding of internetworking routing protocols and technologies (TCP/IP, VPLS, DMVPN, EIGRP, BGP, OSPF, VRRP, HSRP, NHRP).

Experience with Type 1 line encryption devices including, but not limited to the following: KG175, KG250, KG250xs, etc.

Experience with network security best practices, and technologies including, but not limited to, SSH, IPSec, RADIUS, TACACS, firewall policies, and 802.1x.

Experience implementing network performance management solutions ( SolarWinds , NetScout Infini Stream , and Gigamon Deep Observability) and troubleshooting with packet, session and log data.

Working knowledge of Cisco IP telephony products as well as knowledge of interconnection of multiple IP telephony systems via LAN and WAN connections.

Familiarity with datacenter infrastructure and experience with Cisco routers (Cisco ISR and ASR series) and switches including, but not limited to the following: 35xx, 37xx, 38xx, 45xx, 65xx, Nexus 9xxx, 7xxx, 6xxx, 5xxx, 2xxx, 1xxx series.

Hands-on experience with implementation and use of network monitoring, fault management, and performance analysis tools such as Syslog, SNMP, What’s Up Gold, SolarWinds, Scrutinizer, etc.

Demonstrated application of the ITIL framework to deliver IT Service Management for an enterprise information system

Must be able to work a 40-hour work week, normally Monday through Friday

Ability to work overtime during critical peaks and be available to meet last minute requests for overtime if needed

Ability to travel (5-10%) primarily within 75 miles

Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project and Visio

Exceptional attention to detail; excellent verbal and written communication skills; strong critical thinking, organizational, time-management, and problem-solving skills

Clearance Required:

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI

Minimum Education:

Bachelor of Science in Information Technology, Computer Science or Engineering (ABET accredited college)

Minimum Years Of Experience:

15 years of relevant experience

Required Certifications:

Ability to meet or exceed DODD 8140/8570 IAT Level 3 requirements, to include CE certification

CCNP - Cisco Certified Network Professional - Enterprise Advanced Routing and Services

CCIE - Cisco Certified Enterprise Infrastructure

Experience with ServiceNowPreferred:

Master of Science in Information Technology, Computer Science or Engineering

Palo Alto Networks Certification - Network Security

Experience with ITIL

# javelin #LoneWolf

Pay T r ansparency VerbiageAmentum ’ s health and welfare benefits are designed to invest in you and in the things you care about. Your health. Your well-being. Your security. Your future. Eligible employees and their dependents may elect medical, dental, vision, and basic life insurance. Employees are able to enroll in our company’s 401k plan, and, if eligible, a deferred compensation plan and Executive Deferral Plan. Employees will also receive 17 days of vacation per year, seven paid holidays, plus floating holidays and caregiver leave. Hired applicants will be able to purchase company stock and have the opportunity to receive a performance discretionary bonus.The base salary range for this position is $ 2 00 to $ 230 K . This range reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training