Network Engineer – Senior

Bravura, Inc.; Quantico (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Bravura, Inc. seeks a Senior Network Engineer for Quantico, VA. The role involves planning, implementing, and operating complex Cisco-based LAN/WLAN networks, with emphasis on security, VPNs, routing, and firewall policy.

The candidate should have 7+ years of experience, advanced education or DoD training, and active certifications. A Secret clearance is required for this contract position.

Qualifications

• 7+ years of experience in network engineering or related field.
• Clearance: Secret (Level & Investigation) required.
• Education or training options include advanced degrees or DoD courses or certifications.

Responsibilities

• Configure & optimize network hubs, routers & switches (high-level protocols, tunneling).
• Develop & implement network backup & recovery procedures.
• Diagnose network connectivity issues.
• Install & maintain network device OS software (IOS, firmware).
• Install or replace network hubs, routers & switches.
• Monitor network capacity & performance.
• Patch vulnerabilities to safeguard information.
• Test & maintain network infrastructure (HW/SW).
• Design, configure & manage Cisco-based LAN networks including routing & switching.
• Manage Cisco-based wireless CampusNet with WPA3-Enterprise/WPA2, WIDS/WIPS, RF site surveys, and QoS.

Skills

Network design and optimization

Education

Masters or PhD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or SW Engineering

DoD training courses (see list)

Active certifications: CCSP/CCNA/CCNP Security/SecurityX/GCED/GCIA/GCLD/GDSA/GFACT

Tools

Cisco IOS

Job description

Role: Network Engineer - Senior

Location: Quantico, VA

Foundational Qualifications: Candidate must possess at least one of the following -

• Education: Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or SW Engineering; OR
• Training: One of the following approved DoD training courses M02D2M2 Cyber Networks Operations Engineer (Cyber NETOPS Eng); M0923W1 Data Systems Chief; M0923X1 Network Chief Course; M09BNU1 Cyber System Chief; M09CHN1 Communications Chief; M09D3H1 Cybersecurity Managers; M09DRX1 MAGTF Communications Planner; N23CUK1 Signals Intelligence Officers; N46CUK2 Signals Intelligence Officers; OR
• Certifications: One of the following active certifications - CCSP; CCNA; CCNP Security; SecurityX (CASP+); GCED; GCIA; GCLD; GDSA; GFACT

Years of Experience: 7+ years; experience may be considered an alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The Network Engineer – Senior plans, implements, & operates network services/systems, to include HW & virtual environments. This includes, but is not limited to:

• Core Tasks:
  • Configure & optimize network hubs, routers, & switches (e.g., higher-level protocols, tunneling).
  • Develop & implement network backup & recovery procedures.
  • Diagnose network connectivity problem.
  • Install & maintain network infrastructure device OS SW (e.g., IOS, firmware).
  • Install or replace network hubs, routers, & switches.
  • Monitor network capacity & performance.
  • Patch network vulnerabilities to ensure information is safeguarded against outside parties.
  • Test & maintain network infrastructure including SW & HW devices.
• Additional Tasks:
  • Ensure application of security patches for commercial products integrated into system design meet timelines dictated by management authority for intended operational environment.
  • Implement new system design procedures, test procedures, & quality standards.
  • Integrate new systems into existing network architecture.
  • Provide feedback on network requirements, including network architecture & infrastructure.

Specific to this contract, this role will provide Network Engineering support as part of the Network & System Support team, including, but not limited to:

• Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based .edu LAN network to include but not limited to routing & switching configurations; routing protocols such as OSP, EIGRP, BGP, & HSRP / VRRP; ACLs; site-to-site VPNs & tunnels; VLANs & trunking; VRF; STP; Port Security; QoS; IPSec; encryption protocols; TACACS+ / RADIUS; 802.1x; SSH; HTTPS/TLS; SNMPv3; NTP; DHCP; DNS; SysLog; NetFlow; bandwidth utilization & traffic patterns; packet capture & analysis; configuration backups & recovery; IOS & firmware upgrades; connections to Azure Cloud & internet; centralized AAA; applying & verifying DISA STIGs; & Cisco Security Advisories.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based wireless BYOD CampusNet network to include but not limited to WLCs; WAPs enforcing WPA3-Enterprise or WPA2-AES encryption protocols on all SSIDs; WIDS/WIPS to detect & mitigate rogue access points & ensure guest traffic never touches internal LAN; RF site surveys to identify coverage gaps, "dead zones," & high-interference areas; monitoring RF spectrum for non-Wi-Fi interference; RSSI & SNR for all floors/buildings; Co-Channel Interference; STIG & Access Point STIG; Cisco AireOS or IOS-XE wireless images across fleet of Aps; & Cisco DDNAC or Prime Infrastructure for centralized monitoring.
• Create & manage Cisco TAC tickets as required & report status to Customer.
• Develop, manage, report, & document IPAM & VLAN management.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure network circuits & connections.
• Design, configure, manage, monitor, troubleshoot, report, document, & secure network access controls, administrative authentication, & logging on both .edu LAN & BYOD CampusNet wireless network via Cisco Secure ACS or Cisco ISE.
• Coordinate with DISA or commercial providers for installation, testing, & troubleshooting of WAN/Cloud circuits.
• Create & update accurate physical & logical network diagrams & rack elevations for .edu LAN & BYOD CampusNet wireless network to include all supported locations.
• Create & update systems architecture documentation to provide functional overview of solution; map technology capabilities & components to requirements.
• Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures.
• Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents, to include lessons learned & recommendations.
• Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all LAN & wireless HW, SW, OS, firmware, & tools.
• Support Cisco RMA & other HW & SW warranty actions IAW Government direction & processes.
• Install, move, & cable LAN & wireless HW such as physical routers, switches, WLCs, & WAPs in data centers & TRs at all supported locations; support technical refresh projects & changes to requirements.
• Update all network devices to include routers, switches, WAPs, WLCs, applications, SW, protocols, & network services IAW applicable IAVAs, IAVBs, IAVMs, MCDs, OPDIRs, CIO directives; execute patches; & report compliance as required by Government-established processes & deadlines.
• Assist with addressing & solving system connectivity & failure to increase network uptime.