Network Engineer - Sustainment

MSM Technology; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

MSM Technology is seeking a skilled Network Engineer who will be pivotal in designing, implementing, and sustaining the DISA Datacenter and Cloud network infrastructure. Ideal candidates should possess substantial experience and certifications in IT along with an active security clearance. Join a team that focuses on innovation and security within the IT Services industry.

Qualifications

• 4+ years of experience with Datacenter and Enterprise Network infrastructure in a multi-vendor environment.
• Must have an active SECRET or higher security clearance.
• Relevant secondary certifications include Cisco, F5, and Juniper.

Responsibilities

• Provide architectural design, engineering, and lifecycle services for the network infrastructure.
• Ensure compliance with security controls and provide design solutions referencing ITIL Framework.
• Create technical documentation to support engineering efforts.

Skills

Network architectural design

Engineering

Implementation

Technical refresh

Lifecycle services

Excellent verbal communication skills

Excellent written communication skills

Education

IT bachelor's degree or Vendor Network Certification

DoD 8570.01-M/8140.01 IAT Level II Certification

Tools

F5 BIG-IP

ServiceNow

AWS

AZURE

Job description

Join to apply for the Network Engineer - Sustainment role at MSM Technology

1 day ago Be among the first 25 applicants

Join to apply for the Network Engineer - Sustainment role at MSM Technology

Get AI-powered advice on this job and more exclusive features.

• Provide network architectural design, modeling, engineering, implementation, sustainment, migration, technical refresh, and lifecycle services for the DISA Datacenter and Cloud enterprise network infrastructure. Network services and products supported shall include, but are not limited to, routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, Local Area Network (LAN), Wide Area Network (WAN) and protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. The contractor shall also support a number of Intrusion and Detection Systems (IDS) and other network defense architectures in support of cyber defense operations and initiatives.
• Provide design solutions and implementation guides and use DoD and Industry best practices. Contractor is responsible for providing service transition to operations and shall reference an Information Technology Infrastructure Library (ITIL) Framework
• Provide/support implementation solution documents for the configuration and maintenance of DISA hosted Application Delivery Controllers to include software modules such as F5 BIG-IP Local Traffic Manager (LTM), Global Traffic Manager (GTM), Access Policy Manager (APM.
• Design solution documentation that outlines guidance on licensing, physical architecture, logical configuration, eligibility, checklist application inventory, security policy protection phases, and basic administration to include system configuration baseline and security policy configuration baseline.
• Build, implement, and document network enabled applications taking into consideration various factors such as but not limited to infrastructure requirements or limitations, security, and application performance needs and best practices.
• Network services and products supported shall include, but are not limited to, routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, Local Area Network (LAN), Wide Area Network (WAN) and protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. The contractor shall also support a number of Intrusion and Detection Systems (IDS) and other network defense architectures in support of cyber defense operations and initiatives.
• Responsible for all lifecycle components’ compliance with security controls, including confidentiality, integrity, and availability as well as compliance with Security Technical Implementation Guidelines (STIG) in depth.
• Engineer and implement network architectural changes in response to future network technology enhancements, DISA customer requirements, security requirements and enhancements, technical refresh efforts, lifecycle requirements, or changes in network capacity requirements.
• Prepare and solution design/technical documentation to include whitepapers, briefings, and other required documents to support all engineering and implementation efforts with established policy and processes.
• Adhere to DISA enterprise network standards to include developing support documentation, leading technical working groups, conducting product evaluations, developing recommendations, and preparing and presenting briefings.
• Ensure that all engineering and implementation efforts adhere to DISA and DoD policies, and directives from United States Cyber Command (USCC) and Joint Force Headquarters DODIN (JFHQ-DODIN).
  
  

Description

Network Engineer Responsibilities:

• Provide network architectural design, modeling, engineering, implementation, sustainment, migration, technical refresh, and lifecycle services for the DISA Datacenter and Cloud enterprise network infrastructure. Network services and products supported shall include, but are not limited to, routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, Local Area Network (LAN), Wide Area Network (WAN) and protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. The contractor shall also support a number of Intrusion and Detection Systems (IDS) and other network defense architectures in support of cyber defense operations and initiatives.
• Provide design solutions and implementation guides and use DoD and Industry best practices. Contractor is responsible for providing service transition to operations and shall reference an Information Technology Infrastructure Library (ITIL) Framework
• Provide/support implementation solution documents for the configuration and maintenance of DISA hosted Application Delivery Controllers to include software modules such as F5 BIG-IP Local Traffic Manager (LTM), Global Traffic Manager (GTM), Access Policy Manager (APM.
• Design solution documentation that outlines guidance on licensing, physical architecture, logical configuration, eligibility, checklist application inventory, security policy protection phases, and basic administration to include system configuration baseline and security policy configuration baseline.
• Build, implement, and document network enabled applications taking into consideration various factors such as but not limited to infrastructure requirements or limitations, security, and application performance needs and best practices.
• Network services and products supported shall include, but are not limited to, routers, switches, firewalls, web application firewalls, DNS, email gateways, proxy services, VPN, Local Area Network (LAN), Wide Area Network (WAN) and protocols, cryptographic devices, associated device software and firmware, diagnostic tools, and automation systems. The contractor shall also support a number of Intrusion and Detection Systems (IDS) and other network defense architectures in support of cyber defense operations and initiatives.
• Responsible for all lifecycle components’ compliance with security controls, including confidentiality, integrity, and availability as well as compliance with Security Technical Implementation Guidelines (STIG) in depth.
• Engineer and implement network architectural changes in response to future network technology enhancements, DISA customer requirements, security requirements and enhancements, technical refresh efforts, lifecycle requirements, or changes in network capacity requirements.
• Prepare and solution design/technical documentation to include whitepapers, briefings, and other required documents to support all engineering and implementation efforts with established policy and processes.
• Adhere to DISA enterprise network standards to include developing support documentation, leading technical working groups, conducting product evaluations, developing recommendations, and preparing and presenting briefings.
• Ensure that all engineering and implementation efforts adhere to DISA and DoD policies, and directives from United States Cyber Command (USCC) and Joint Force Headquarters DODIN (JFHQ-DODIN).
  
  

Requirements

Required Skills:

• Must have an active SECRET or higher security clearance.
• 4+ years of relevant experience with design and implementation of complex Datacenter and Enterprise Network infrastructure in a multi-vendor environment
• DoD 8570.01-M/8140.01 IAT Level II Certification (Security+, CySA+, etc.)
• Relevant secondary certification (i.e. Cisco, F5, Juniper, Palo Alto, Cloud, etc.)
• Excellent verbal and written communication skills
  
  

Preferred Skills

• IT bachelor’s degree or Vendor Network Certification (Professional or higher)
• Strong and extensive knowledge of datacenter-based network methods, protocols and technologies to include:
• Routing [BGP/ OSPF/MP-BGP/ MPLS/VPN/Multicast/PBR]
• Switching [RSTP, VLAN, VXLAN, LLDP, VPC, LACP, LAG]
• TCP/IP, IPv4, IPv6, UDP, Layer 1 through Layer 7, IPSEC, HAIPE
• Firewalls [VPN, ACLs, Whitelisting]
• Load balancing [APM, ASM, LTM, GTM]
• SDN/ NFV/ IAC [ACI, Service Insertion, Ansible]
• Identity and Access Management with RBAC [AAA/RADIUS/TACACS/ LDAP]
• Network management and analysis (Performance Manager (PM), Juniper Space, Cisco ISE, Splunk]
• Structured cabling and installation standards
• Application of net- work security and design practices
• Cloud management [AWS/AZURE]
• Knowledge in software modules to include: [F5 BIG-IP LTM, GTM, APM, ASM]
• Proficiency in use of government systems to track ops and management of systems and performance including but not limited to ITSM, GTMS, Hewlett Packard Operations Orchestration (HPOO), ServiceNow, Microsoft 365

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at MSM Technology by 2x

Sign in to set job alerts for “Network Engineer” roles.

Network Administrator - Managed Services

Oklahoma City, OK $80,000.00-$120,000.00 1 day ago

Oklahoma County, OK $119,000.00-$179,000.00 2 days ago

Oklahoma City, OK $90,300.00-$189,600.00 3 months ago

Network Engineer III (Onsite Oklahoma City, OK)

Communications and Network Integration Engineer

Oklahoma City, OK $60,000.00-$100,000.00 7 months ago

Infrastructure Engineer Sr - Wireless Network

Oklahoma City, OK $57.99-$62.99 5 hours ago

Infrastructure Engineer Sr - Netscaler and Wireless Networking

Linux Cryptography and Security Engineer

Linux Cryptography and Security Engineer

Senior Network Engineering Lead - Remote

Oklahoma City, OK $110,000.00-$130,000.00 10 months ago

Security Engineer, MSP Email Security (Telco Strategic)

Oklahoma City, OK $86,800.00-$198,000.00 4 days ago

Oklahoma City, OK $86,800.00-$198,000.00 4 days ago

Oklahoma City, OK $86,800.00-$198,000.00 5 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.