IP Network Test Engineer

By Light Professional IT Services

Fort Meade, MD

Apply
JOB DETAILS
SKILLS
802.1, Access Control, Accounting, Analysis Skills, Auditing, Authentication, BFD (Bidirectional Forwarding Detection), BGP, BGP Routing Protocol, BSD (Berkeley Software Distribution) Unix Operating System, CCIE - Cisco Certified Internetwork Expert, CCNA - Cisco Certified Network Associate, CISCO PIX Firewall, CISSP - Certified Information Systems Security Professional, Certification Evaluation, Cisco ASA (Adaptive Security Appliance), Cisco IOS (Internetworking Operating System), Cisco Network Systems, Cisco Routers, Cloud Computing, Communication Skills, CompTIA Network+, CompTIA Security+, Computer Network Defense (CND), Computer Security, Contingency Plans, Design Services, DoD Directive 8140, DoD Directive 8570, Employee Assistance Plan, Ethernet, F5 BIG-IP, Federal Government, Federal Laws and Regulations, Firewalls, FreeBSD (Berkeley Software Distribution) Unix Operating System, GSEC - GIAC Security Essentials Certification, HP-UX Operating System, HSRP (Hot Standby Router Protocol), Hardware Quality Assurance, Hewlett-Packard Systems, IAT - Information Assurance Technical, ICMP, IGP (Interior Gateway Protocol), IP (Internet Protocol), IPsec (IP Security), IPv4, IPv6, IXIA, Intellectual Property Analysis, Interpersonal Skills, Intrusion Detection Systems, JNCIE - Juniper Networks Certified Internet Expert, Juniper Network Security Products, Juniper Networks Product Family, Juniper Routers, Label Distribution Protocol (LDP), Laboratory Analysis, Laboratory Testing, Layer 2 Protocols, Life Insurance, Linux Operating System, Load Balancing, Local Area Network (LAN), MPLS (Multi-Protocol Label Switching), Market Research, Microsoft Product Family, Multicast, Network Administration/Management, Network Architecture/Engineering, Network Performance/Analysis, Network Protocols, Network Routers, Network Routing, Network Security, Network Switching, Network System Hardware, Network Testing, On Site Support, Open Shortest Path First Protocol (OSPF), Operating Systems, Operational Support, Oracle Solaris (fka Sun Microsystems Solaris), Policy Development, Presentation/Verbal Skills, Problem Solving Skills, Production Systems, Professional Services, QoS (Quality of Service), RIP (Routing Information Protocol), RSVP (Reservation Protocol), Regression Testing, Regulations, Remote Access, Risk Analysis, Routing Protocols, SCNP - Security Certified Network Professional, SCO Unix Operating System, SNMP (Simple Network Management Protocol), SONET, SSCP - Systems Security Certified Practitioner, SSH (Secure Shell), SSL-TLS (Secure Socket Layer - Transport Layer Security), Security Attacks, Security Design, Spirent, State Laws and Regulations, Sun Microsystems Hardware, System Test, Systems Engineering, TCP/IP (Transmission Control Protocol/Internet Protocol), Team Lead/Manager, Technical Support, Technical/Engineering Design, Telecommunications, Test Design, Test Equipment, Test Plan/Schedule, Testing, Threat and risk analysis (TRA), United States Department of Defense (DoD), Unix Operating Systems, VLAN (Virtual Local Area Network), VMWare, VMWare ESX/ESXi, VPLS (Virtual Private LAN Service), VPN (Virtual Private Network), VRRP (Virtual Router Redundancy Protocol), Web Infrastructure, Wide Area Network (WAN), Work From Home, Writing Skills
LOCATION
Fort Meade, MD
POSTED
20 days ago

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. This is not a Remote Job. It is located in Fort Meade, MD. 

Position Overview

An IP Network Engineer assesses, tests, and recommends solutions and technologies to improve all aspects of DISN IP backbone. These technologies include network devices (routers, switches, firewalls, and Intrusion Detection Systems (IDS), and services Authentication, Authorization and Accounting (AAA), Access Control List (ACL), secure remote access (i.e Secure shell, Secure VPN, IPSec), and IPv6 capable devices.

An IP Network Engineer is responsible for all DISN aspects regarding the design review/recommendation, lab testing, evaluation/certification, and implementation/deployment as well as provide Tier3 support for DoD’s NIPRNet backbone network. 

Responsibilities

  • Provide technical expertise in design review, lab testing & test report, implementation plan and deployment of new advanced large-scale complex DoD networks.  
  • Implement MPLS services offerings on the DISN network.  MPLS services include L3VPN, L2VPN, VPLS (Virtual Private LAN service) and CsC (Carrier Supporting Carrier).  Platforms tested include Juniper MX Series, Cisco ASR Series routers.
  • Provide technical security expertise in design, test, evaluation and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET/SIPRNET network protection; Assess and analyze current NIPRNET/SIPRNET network architecture; Propose and analyze potential solutions. 
  • Conducting audits, risk assessment, threat analysis, contingency planning and implementing security standards and methods.
  • Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determines/implements effective countermeasures IAW established policies/regulations/directives.
  • Delivers Router and Firewall Test Plans, Test Reports, as well as Implementation Plans to provide direction for deployment in the production environment. Prepare field recommendations and Configuration Guides.
  • Provide Tier III engineering support to field operations personnel and deliver Field Support Lessons Learned reports.
  • Conduct market research to find products to meet requirements.

Required Experience/Qualifications

  • BS in Networking, Telecommunications, or related area required.
  • CCNP-Enterprise or JNCIP-ENT or equivalent routing and switching experience.
  • DoD 8570-01-M IAT Level I or higher to include one of the following:  A+ CE, CCNA-Security, CND, Network+ CE, SSCP Security+, GSEC, SCNP, SSCP, or CISSP.
  • Extensive experience in IP networking, including IP platforms such as customer edge routers, provider edge routers, switches, firewalls, Internet Access Points (IAP’s), Cloud Access Points (CAP’s), Layer 2 and Layer 3 Virtual Private Networks (L2VPN and L3VPN), Internet Protocol Version 4 (IPV4), Internet Protocol Version 6 (IPV6/6VPE), Ethernet VPN (EVPN), Quality of Service (QoS), Segment Routing, Multiprotocol Label Switching (MPLS), Virtual Local Area Network (VLAN), Autonomous System Boundary Router (ABSR), external border gateway protocol (BGP) (eBGP), Layer 2 Psuedowire, Interior Gateway Protocols (IGP), Inter- Intermediate System to Intermediate System (IS-IS), Open Shortest Path First (OSPF), MPLS – Resource Reservation Protocol (RSVP), Label Distribution Protocol (LDP), Carrier servicing Carrier (CsC), Multicast, Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), Ethernet Operation, Firewalls including Access Control List (ACL) , Operation Administration and Maintenance (OAM) Protocol and Network Management., 802.1Q and VRRP/HSRP.
  • Expertise in large-scale IP Networking & Testing with backbone routers (Juniper MX and Cisco ASR9K) running ISIS, BGP/MP-BGP (multi AS), MPLS routing protocols, switches and testing gear including traffic generators from IXIA, Spirent Test Center and Agilent N2X.
  • Routing protocols: BGP, MP-BGP, MPLS/RSVP, OSPF, IS-IS, RIP, Multicast, IPv6, QoS, MACSec.
  • Advanced MPLS (Multiprotocol Label Switching)  services (L3VPN, L2VPN, VPLS & CSC).
  • TCP/IP , LAN/WAN, SONET, ICMP and SNMP management protocols.

Preferred Experience/Qualifications

  • CCIE or JNCIE or equivalent routing and switching experience.
  • Hardware certification testing, JUNOS/IOS/IOS-XR operating system regression testing which include all protocols and services required for DISN backbone routers.  Router platforms include Juniper MX960/MX480 routers and Cisco ASR9K (ASR9010/ASR9006) routers.
  • DISN IP Design Experience
  • Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, and Agilent N2X.
  • Firewalls (Juniper/Netscreen, Cisco ASA/PIX, CyberGuard, SideWinder), VPN products (IPSec, SSL VPN).
  • IDS/IPS (Arbor Peakflow DoS & Traffic, Top Layer, ForeScout).
  • F5 Big-IP load balancer, BlueCoat Web Proxy.
  • Unix (SUN/HP/BSD) Servers/Workstations, Linux, PC Servers/Workstations
  • VMWare ESXi server.
  • JunOS, Cisco IOS & IOS-XR, UNIX (Sun Solaris, BSD, HPUX, SCO), VMWare, Linux, FreeBSD, Microsoft OS Servers and Workstations.
  • Certificate Authority Server, ACE/SecureID Server, TACACS+, RADIUS, MS Exchange, Sendmail, Apache web server, PKI, WINS, DHCP, DNS, FTP/SFTP/TFTP, SSH, NTP, Netflow/Cflowd servers.
  • Possess excellent interpersonal communication skills with the ability to interact with management and staff at all levels.
  • Candidate should also have excellent verbal and written communication skills.
  • MS in Networking, Telecommunications, or related area desired

Special Requirements/Security Clearance

  • Minimum SECRET Clearance required.

Salary Range

Salary Minimum: $125,000

Salary Maximum: $190,000

The annual base salary provided is a guideline for this position and is not a guarantee of compensation or salary. When extending an offer, By Light also considers other variables such as (but not limited to) work experience, education, training, skill set, internal peer equity, clearance level, and market conditions. In addition, By Light provides an extensive selection of benefits and offerings to our employees.

By Light recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:

  • Medical, Dental & Vision Coverage
  • Wellness Program
  • 401(k) Matching
  • Disability (Short Term & Long Term)
  • Employee Assistance Program
  • Life Insurance
  • Education & Training
  • Generous Leave Policy (11 Federal Holidays, PTO, and Military Leave)

By Light is an Equal Opportunity and Affirmative Action Employer. All qualified candidates will receive consideration regardless of gender, race, veteran status, disability, and any other protected class in accordance with federal, state and local laws.

About the Company

B

By Light Professional IT Services