Senior Network Engineer

Job Description

Job Description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Profit sharing
• Tuition assistance
• Vision insurance

Serve as the senior technical lead for the deployment, security, and operational availability of DTRA’s enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure.

Administer F5 BIG-IP platforms, including Local Traffic Manager (LTM), Global Traffic Manager/DNS (GTM/DNS), Access Policy Manager (APM), and Application Security Manager/Advanced Web Application Firewall (ASM/AWAF).

Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors to support highly available mission applications.

Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM.

Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers.

Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats.

Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation.

Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime.

Configure, administer, and troubleshoot Palo Alto Networks Next-Generation Firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking.

Apply DISA Security Technical Implementation Guides (STIGs) and remediate vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets.

Prepare change control documentation, maintain network topology diagrams, and provide Tier 3/4 incident escalation support.

Required Qualifications:

• Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI).

• Meet the applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement.

• At least five years of hands-on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM.

• At least five years of hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks Next-Generation Firewalls.

• Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies.

• Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment.

Desired Qualifications:

• IAT Level III certification, such as CISSP or CASP+, consistent with the position’s applicable qualification requirements.

• F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM.

• Hands-on experience migrating F5 environments to rSeries or VELOS platforms.

• Cisco Certified Network Professional (CCNP) Enterprise certification.

• Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.

• Proven experience leading live SD-WAN migrations and cutovers with minimal operational disruption.

• Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.