Sr. Network Engineer

System One; Lorton (VA); On-site; USD 125,000 - 178,000; Full time

Job summary

System One is seeking a Sr. Network Engineer to support the Insider Threat Program in Lorton, VA on-site. This contract-to-hire role requires TS/SCI clearance and hands-on experience with Cisco networking gear, firewall management, and cross-domain data transfer.

You will design, deploy, and maintain enterprise network infrastructure, ensure compliance with NIST/FISMA/STIG, and oversee system recapitalization for capacity growth. Priority given to CCNP/CCNP Security certified professionals.

Qualifications

• Bachelor's degree with 8+ years of relevant experience or Master's with 6+ years.
• CCNP and CCNP Security certifications.
• Expertise deploying LAN/WAN switches and firewalls (Cisco ASA/Firepower, Nexus).
• Experience with SolarWinds/WhatsUp Gold/NetQoS/NetBrain.
• VMware, Linux, Windows Server and AD administration.
• Ability to obtain DHS EOD SCI clearance.
• NIST/FISMA/STIG compliance knowledge.
• 10+ years IT service delivery management experience.

Responsibilities

• Support, sustain, design and evolve the network enterprise of the Insider Threat Program (ITP).
• Support the ITP network infrastructure.
• Perform all routine maintenance activities.
• Provide guidance on upgrades and system recapitalization.
• Perform availability/capacity management.
• Oversee High Speed Guard Cross Domain solution for multi-domain data transfers.
• Support documentation to capture the configuration baseline.
• Design and support system recapitalization plans for capacity growth.
• Serve as the subject matter expert on ITP network infrastructure.
• Install, configure, and maintain Cisco network and firewall gear (Cisco 2900/4500/9300/9400/6800, Nexus 9000, Firepower, ASA).
• Build firewall policy and optimized rule sets for efficiency and threat prevention.
• Deploy new network configurations to meet NIST/FISMA/STIG compliance.
• Support ATO reviews and Audits.

Education

Bachelor's degree

Master's degree

Tools

SolarWinds

WhatsUp Gold

NetQoS

NetBrain

VMware

Linux

Microsoft Server/AD

Cisco IOS

Palo Alto firewall management

Job description

Job Title: Sr. Network Engineer
Location: Lorton, VA (onsite)
Type: Contract To Hire
Compensation: $110.00 per hour
Security Clearance: TS/SCI

Responsibilities

• Support, sustain, design and evolve the network enterprise of the Insider Threat Program (ITP).
• Support the ITP network infrastructure.
• Perform all routine maintenance activities.
• Provide guidance on upgrades and system recapitalization.
• Perform availability/capacity management.
• Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains.
• Support all documentation to effectively capture the configuration baseline.
• Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer.
• Serve as the subject matter expert on all ITP network infrastructure.
• Installs, configures, and maintain equipment including Cisco network and FW gear Cisco 2900, 4500, 9300, 9400, 6800 and Nexus 9000, and Cisco Firepower, ASA.
• Build firewall policy and optimized rule sets for improved efficiency and threat prevention.
• Deploy new network configuration to meet NIST/FISMA/STIG compliance requirements.
• Support ATO reviews and Audits.

Requirements

• Bachelors degree and (8)+ years of prior relevant experience or Masters with (6)+ years of prior relevant experience
• Cisco Certified Network Professional (CCNP)
• Engineering, Deployment and operations of LAN and WAN Switches, and Firewalls ensuring seamless integration into existing network infrastructure
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
• Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, post-action reporting, and mapping a path forward.
• Network Management experience with Solarwinds, or WhatsUP Gold, NetQoS, NetBrain
• Cross platform familiarity and experience with VMWARE, Linux, Microsoft Server and AD.
• Ability to obtain DHS EOD SCI
• Preferred Qualifications: Master's degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (10+ years) in IT service delivery management
• Experience with User Activity Monitoring products and platforms
• Experience with Everfox High Speed Guard Platform
• Experience with Cisco, Juniper LAN/WAN network infrastructure
• Experience with Palo Alto Firewalls
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Network Professional (CCNP) - Security
• Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN-OS 7.0 Version

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.