IP Network Engineer

::: {bind="html: Job.Requirements"}Responsibilities (include, But Not Limited To)Analyzes and studies complex system requirements.Designs software tools and subsystems to support software reuse and domain analyses and manages their implementation.Develop and validate system architecture.Develop and support initial implementation and provide lifecycle engineering of network architecture.Support Quality of Service (QoS) policies, requirements, and testing.Provide technical expertise in design review, lab testing and test report, implementation plan and deployment of new advanced large-scale complex DoD networks.Provide emerging insertion technologies (i.e. new features, capabilities, etc.).Support mission partners to satisfy the interoperability requirements.Provide all required documentation in support of Configuration Control Boards (CCB) and supervises software configuration management.Provide Tier III support and oversee Tier III support engineers.Conduct market research to find products to meet requirements.Implement MPLS services offerings on the DISN network called IP Transport Provider Edge (IPTPE). MPLS services include L3VPN, L2VPN, Virtual Private LAN service (VPLS) and Carrier Supporting Carrier (CsC). IPTPE platforms tested include Juniper MX960/MX480 and Cisco ASR9010/ASR9006 routers.Perform testing and support implementation of the DMZ COI VPN (part of NIPRNet Hardening project), which provides separation of the NIPRNet traffic and Mission Critical Community of Interest (COI) traffic using the MPLS L3VPN service.Configure and perform crypto testing and troubleshooting using various protocols.Provide technical security expertise in design, test, evaluation, and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET network protection; Assess and analyze current NIPRNET network architecture; Propose and analyze potential solutions.Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determines/implements effective countermeasures IAW established policies/regulations/directives.Deliver Router and Firewall Test Plans and resulting Test Reports; prepare field recommendations and Configuration Guides.Experience/QualificationsDoD and/or Government program experience preferred; DISA experience a plus.BA/BS in a technical discipline (engineering, information technology, etc.) with at least 5 years of experienceLarge Enterprise or DoD IP Design Experience running BGP/MP-BGP (multi AS) and MPLS routing protocolsExtensive router regression testing experience with Cisco ASR9K (ASR9010/ASR9006) routersStrong routing protocols experience: BGP, MPLS/RSVP, OSPF, IS-IS, Multicast, Layer-2/Layer-3 Virtual Private Network (VPN) and Carrier Supporting Carrier (CsC).Working knowledge of Microsoft Office Tools: PowerPoint, Word, and ExcelExcellent communication (verbal and written), effective leadership, and interpersonal skills**Special Requirements/Security Clearance**DoD Active Secret Clearance RequiredDoD Approved 8570/8140 Certification Required, i.e., Security+ CE, or EquivalentMust be a US CitizenNo/Limited travel is expected**Preferred Experience/Qualifications**Experience with Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, Smartbits and Agilent N2XCCNP or JNCIP or equivalent routing and switching experienceExperience configuring Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), HSRP, 802.1Q, SONET and SNMP a plusWorking experience with network security products (Firewalls, IDSs, SIEMs) a plus**Physical Demands**Ability to type, communicate via telephone and sit for extended periods of time.:::