Network Architect

Gromelski & Associates, Inc.; Manassas (VA); On-site; USD 135,000 - 200,000; Full time

Job summary

Gromelski and Associates, Inc. in Manassas, VA, seeks a Network Architect to design and optimize enterprise networks, including Kubernetes-based environments and PaaS networking.

The role requires experience with CNI, ACLs, VXLAN, and network performance testing; DoD Secret Clearance and U.S. citizenship are required. Salary range is $135,000–$200,000 with relocation assistance available.

Qualifications

• Bachelor’s degree in a related discipline or equivalent experience/education.
• Must be able to obtain and keep a DoD Secret Clearance; U.S. citizen.
• Experience with Kubernetes and CNI technologies such as Calico, Cilium, Flannel, Canal, etc.

Responsibilities

• Evaluate dual CNI plugin options to support multiple MTU sizes and Kubernetes CNI configurations.
• Migrate to a 10.CCE for the PaaS network and reduce ACLs while preserving subnet ingress/egress.
• Evaluate use of Broadcast on VXLAN for applications.
• Provide network engineering support to NWG IPT.
• Monitor, maintain, and analyze network performance and failures.

Skills

Kubernetes

CNI technologies

ACLs

Network integration

VLANs/subnetting

Wireshark

Sniffers

Education

Bachelor’s degree in related discipline

Tools

Wireshark

Sniffers

Linux OS

SNMP

Python

Bash

Job description

Location Manassas, VA (Relocation Assistance Available)

Gromelski and Associates, Inc. (GAI) partners with prime contractors to provide professional services. Key service areas include Engineering Design and Documentation; Software Development and Testing; System Integration, Testing and Evaluation; Lab Management and Field Installation; Integrated Logistics Support, Training Development and Delivery, Multimedia Support, and Technical System Support.

Network Architect Job Description:

Network Architect Required Tasks:

• Evaluate utilizing dual Container Network Interface (CNI) plugins to support multiple Maximum Transmission Unit (MTU) sizes and assess the feasibility of using a single MTU within the PaaS environment versus dual MTUs for external workloads. The candidate should be familiar with multi‑MTU network messaging and Kubernetes CNI configurations. Because CNI is a pluggable framework, you can choose different networking solutions (Calico, Cilium, Flannel, etc.) that implement the CNI spec to meet your cluster’s requirements. Familiarity with these network solutions is desired.
• Migrate to a 10.CCE for the PaaS network. Reduce number of Access Control Lists (ACLs) for Control Plane traffic in Platform as a Service (PaaS) while maintaining subsystem subnet ingress/egress.
• Evaluate the need of applications using Broadcast on VxLAN.
• Perform network engineering in support of the Network Working Group (NWG IPT).
• Responsible for network monitoring and maintenance, configuration management, network support and problem resolution, system performance analysis and evaluation, performance metrics analysis, and failure analysis on the network for the program.
• Interfaces with customers, developers and support programs to ensure optimal flow of communications between subsystems.
• Design and enhancement and planning of computer network communications including specifications and schematics for network architecture on multiple subsystems.
• Perform evaluation and make recommendations on network hardware and software selections, implementation techniques, and tools for the most efficient solution to meet tactical programmatic needs, including present and future capacity requirements.
• Conduct performance and failover testing of network devices and their impact on system stability.
• Maintain technical expertise in all areas of network and computer hardware/software interconnection and interfaces – such as firewalls, routers, switches, gateways, middleware, etc. and OSI layer 1/2/3/4 functionality involved.
• Evaluate and recommend new technologies to enhance capabilities of the network system performance and monitoring.
• Perform network documentation for working group presentations and exchanges.

Network Architect Required Skills:

• Experience with Kubernetes.
• Experience with Container Network Interfaces (CNI) technologies such as Calico, Cilium, Flannels, Canal, etc.
• Experience with ACLs is required.
• Network Integration experience for a variety of network protocol standards.
• Experience analyzing VLANs, spanning-tree, routing (static and dynamically implemented protocols), ACLs, IP addressing and subnetting.
• Knowledge of packet analysis tools such as Wireshark or Sniffers.

Network Architect Desired Skills:

• Network development and integration experience for a variety of network protocol standards including TCP/IP, HSRP/VRRP, RIP, OSPF, BGP, RSTP (802.1w), MSTP (802.1s), DHCP, 802.1q tagging, multicast, PAgP or LACP (EtherChannel), QoS and Active-Active technologies (vPC and IRF)
• Strong network troubleshooting and problem identification
• Familiarity with network device vendors such as Cisco and Arista
• Familiarity with 1/10/25/40/100 Gig protocols, serial and satellite links, cable standards, and optical specifications/requirements.
• Familiarity with Linux OS, SNMP, Python and Bash is a plus
• Knowledge of TCP/UDP protocol packet format desirable
• Knowledge of Software Define Networking using OVS is a plus
• Knowledge of Kubernetes is a plus
• Knowledge of VxLAN is a plus

Network Architect Additional Requirements:

• Bachelor’s degree from an accredited college/university in a related discipline, or equivalent experience/combined education, with up to 3 years of professional experience.
• Must be able to obtain and keep a DoD Secret Clearance which means you must be a U.S Citizen.

Start Date: Negotiable

Salary Range:$135,000 - $200,000

Gromelski and Associates is an equal opportunity employer and does not discriminate in employment on the basis of race, color, religion, sex, pregnancy, national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service or other non-merit factor.

If you have reached our website in search of an employment opportunity or to apply for a position, and you require an accommodation, please contact Sarah Gromelski via email at [e-mail] . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.