Principal/Sr. Principal Network Engineer

Bachelor of Science in Technology, Engineering or Mathematics (STEM) discipline with 5 years of work-related experience OR Master’s degree with 3 years of experience OR 9 years experience in lieu of degree (for Level 3)
Bachelor of Science in Technology, Engineering or Mathematics (STEM) discipline with 9 years of work-related experience OR Master’s degree with 7 years of experience OR 13 years experience in lieu of degree (for Level 4)
Security+ or equivalent certification required
Information Assurance Technical Workforce (IAT) level II or higher
Active Top Secret security clearance with SCI and must be able to successfully complete a CI polygraph
Ability and willingness to travel (less than 10% of time)
Experience as a network engineer with hands-on experience of network design, development, monitoring and testing methodologies
Strong system Windows & Server Administrator skills to support the smooth operation of multi-user computer systems
Understanding of standard DoD security practices such as STIG compliance and system accreditation
Experience configuring VLANS’s and enforcing ACL’s
Firewall fundamentals with a firm understanding of rulesets, port and protocols, NAT and PAT implementation

Maintains smooth operation of local area, worldwide and virtual private networks (VPN) using Cisco ASA & Firepower devices
Plans, evaluates, and coordinates installation and/or reconfiguration of hardware and software elements of data and/or voice communication network
Maintains technical expertise in all areas of networks and computer hardware and software interconnection and interfacing, such as routers, switches, firewalls, etc.
May propose solutions to management to ensure all communications requirements based on future needs and current usage, configuring such solutions to optimize cost savings
May design network or portion of network that includes selection of hardware and software packages
Perform continuous monitoring tasks in compliance with minimum required intervals, review and analyze logs, audits, alerts, investigate anomalies and suspicious activity reports, and document and report findings in a timely manner
Performing compliance scanning and generating reports (STIG, SCAP and Vulnerability), validating findings generated by internal and external customers prior to integration, and supporting and guiding the accreditation process for multiple networks
Ancillary duties may include setting up administrator and service accounts, maintaining system documentation, tuning system performance, installing system wide software and allocating mass storage space
Support 24/7 weekend rotation (~every 14 weeks)