Network Architect

Trace Systems Inc.; Stuttgart; Vor Ort; EUR 120.000 - 180.000; Vollzeit

Zusammenfassung

Trace Systems Inc. is seeking a cleared Network Architect SME to design, implement, and operate enterprise networks on-site in Stuttgart, Germany. The role emphasizes architecture design, complex routing/switching, and security orchestration across global networks.

Responsibilities include deploying Cisco ACI/Nexus, Palo Alto and Firepower devices, ISE for Zero Trust, and automation with Ansible and Python. Candidates must hold a Secret clearance and US citizenship to deploy OCONUS.

Qualifikationen

• Active US Government Secret clearance with TS/SCI eligibility.
• US Citizenship is required.
• 15+ years in Routing & Switching and Network Security.
• 15+ years in Data Center Technologies and Global Enterprise Networks.
• Current IAT Level II certification (Security+CE or higher).
• CCIE Certification is required.
• Ability to meet OCONUS deployment requirements (TESA).

Aufgaben

• Design, implement, and maintain reliable, scalable network systems.
• Configure enterprise routing, switching, DMVPN, MPLS, and segmentation.
• Manage datacenter fabrics using Cisco ACI and Nexus platforms.
• Deploy and manage Palo Alto, Cisco Firepower, and related firewalls.
• Administer Cisco ISE for secure access and Zero Trust support.
• Provision KG encryptors (e.g., TACLANE) for classified traffic.
• Develop automation with Ansible, Python, and REST APIs.
• Maintain F5, Infoblox DNS/DHCP/IPAM, and virtualization (VMware NSX).
• Identify bottlenecks, implement IaC, and drive reliability.
• Collaborate with operations to deliver automation use-cases.

Kenntnisse

Network design

Troubleshooting

Performance optimization

Security thinking

Cross‑team collaboration

Ausbildung

Bachelor’s Degree + 3 years specialized experience

Associate’s Degree + 7 years specialized experience

Major Certification + 7 years specialized experience

11 years recent specialized experience

Tools

Cisco ACI

Cisco Nexus switches

Palo Alto Firewalls

Cisco Firepower/FMC

Cisco ISE

TACLANE encryption

Ansible

Python

REST APIs

F5 Load Balancers

Infoblox DNS/DHCP/IPAM

VMware NSX/ESXi

CSfC solutions

Jobbeschreibung

Trace Systems is seeking a cleared Network Architect SME to provide expert level technical support regarding the design, configuration, implementation, operational management and troubleshooting of the Enterprise Network on‑site in Stuttgart, Germany.

Duties and responsibilities to include particular emphasis on design, implementation, and support of architectures but not limited to:

• Design, implement, and maintain highly reliable and scalable network systems.
• Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN, MPLS Segment‑Routing).
• Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
• Deploy, manage, and update Palo Alto and Cisco Firepower firewalls, including centralized management platforms (Panorama, FMC).
• Administer Cisco Identity Services Engine (ISE) for secure endpoint access, policy enforcement, and Zero Trust architecture support.
• Provision, key, and maintain KG encryptors (e.g., TACLANE) to secure classified and mission‑critical traffic.
• Develop automation frameworks and leverage network automation tools (Ansible, Python, REST APIs) to streamline deployments and support Software‑Defined Access (SDA).
• Maintain core network services including F5 load balancers and Infoblox for DNS, DHCP, and IPAM.
• Proactively identify and resolve performance bottlenecks and single points of failure.
• Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
• Gather and analyze metrics for performance tuning, fault discovery, and after‑action reporting.
• Work with operations teams to build automation use‑cases and improve reliability through rigorous testing and release procedures.
• BlackCore networks running MPLS, L3VPN, L2VPN, MP‑BGP, OSPF, IS‑IS
• Commercial Solutions for Classified (CSfC) solutions
• Nexus 5K, 7K, and 9K data center switches operating in ACI & NX‑OS Mode
• Cisco ASA Firewalls, FirePOWER, and FTD
• F5 Load‑Balancers
• VMware ESXi & NSX
• Provide network engineering support for core infrastructure spanning multiple Continents in the AFRICOM AOR utilizing diverse transport
• Maintain industry best practices and standards for installation, configuration and support of local area network (LAN), wide area network (WAN) for internet systems or a segment of a network system
• Provide technical and escalation support to include troubleshooting and break/fix actions
• Understand broad client requirements and translate them into documented engineering requirements.
• Execute high client initiatives and guide deployment of innovative solutions using the latest technologies to support the warfighte
• Develop new strategic initiatives and customer relationships while continuing to enhance preexisting initiatives and relationships
• Consolidate, project, and grow pre‑existing efforts
• Proactively arrange technology engagements with clients and align trace technology solutions to integrate
• Analyze requirements, design, develop and deliver documentation deliverables of solutions lifecycle such as design, process, policy, techniques, tactics, and procedures in a timely manner.

Minimum Qualifications:

• An Active, in‑scope US Government issued active Secret clearance, with eligibility for TS/SCI.
• Due to the nature of the work and contract requirements, US Citizenship is required.
• Fifteen (15) years of experience with Routing and Switching protocols.
• Fifteen (15) years of experience with Network Security protocols.
• Fifteen (15) years of experience with Data Center Technologies.
• Fifteen (15) years of experience with Global Enterprise Networks.
• Current IAT Level II certification (Security+ce, etc. or higher).
• CCIE Certification
• Ability to meet TESA requirements to deploy OCONUS.

Desired Qualifications:

• ITILv4 Foundations Certification

Education:

• Bachelor’s Degree plus 3 years of recent specialized experience, OR
• An Associate’s Degree plus 7 years of recent specialized experience, OR
• Major Certification plus 7 years of recent specialized experience OR
• 11 years of recent specialized experience.

Trace Systems is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.