Network Engineer - Senior

Network Engineer - Senior Location: Quantico, VA Foundational Qualifications: Candidate must possess at least one of the following - Education: Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or SW Engineering; OR Training: One of the following approved DoD training courses M02D2M2 Cyber Networks Operations Engineer (Cyber NETOPS Eng); M0923W1 Data Systems Chief; M0923X1 Network Chief Course; M09BNU1 Cyber System Chief; M09CHN1 Communications Chief; M09D3H1 Cybersecurity Managers; M09DRX1 MAGTF Communications Planner; N23CUK1 Signals Intelligence Officers; N46CUK2 Signals Intelligence Officers; OR Certifications: One of the following active certifications - CCSP; CCNA; CCNP Security; SecurityX (CASP+); GCED; GCIA; GCLD; GDSA; GFACT Years of Experience: 7+ years; experience may be considered an alternative to foundational qualifications. Clearance Level & Investigation: Secret Job Description: The Network Engineer – Senior plans, implements, & operates network services/systems, to include HW & virtual environments. This includes, but is not limited to: Core Tasks: Configure & optimize network hubs, routers, & switches (e.g., higher-level protocols, tunneling). Develop & implement network backup & recovery procedures. Diagnose network connectivity problem. Install & maintain network infrastructure device OS SW (e.g., IOS, firmware). Install or replace network hubs, routers, & switches. Monitor network capacity & performance. Patch network vulnerabilities to ensure information is safeguarded against outside parties. Test & maintain network infrastructure including SW & HW devices. Additional Tasks: Ensure application of security patches for commercial products integrated into system design meet timelines dictated by management authority for intended operational environment. Implement new system design procedures, test procedures, & quality standards. Integrate new systems into existing network architecture. Provide feedback on network requirements, including network architecture & infrastructure. Specific to this contract, this role will provide Network Engineering support as part of the Network & System Support team, including, but not limited to: Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based.edu LAN network to include but not limited to routing & switching configurations; routing protocols such as OSP, EIGRP, BGP, & HSRP / VRRP; ACLs; site-to-site VPNs & tunnels; VLANs & trunking; VRF; STP; Port Security; QoS; IPSec; encryption protocols; TACACS+ / RADIUS; 802.1x; SSH; SNMPv3; NTP; DHCP; DNS; SysLog; NetFlow; bandwidth utilization & traffic patterns; packet capture & analysis; configuration backups & recovery; IOS & firmware upgrades; connections to Azure Cloud & internet; centralized AAA; applying & verifying DISA STIGs; & Cisco Security Advisories. Design, configure, manage, monitor, troubleshoot, report, document, & secure Cisco-based wireless BYOD CampusNet network to include but not limited to WLCs; WAPs enforcing WPA3-Enterprise or WPA2-AES encryption protocols on all SSIDs; WIDS/WIPS to detect & mitigate rogue access points & ensure guest traffic never touches internal LAN; RF site surveys to identify coverage gaps, "dead zones," & high-interference areas; monitoring RF spectrum for non-Wi-Fi interference; RSSI & SNR for all floors/buildings; Co-Channel Interference; STIG & Access Point STIG; Cisco AireOS or IOS-XE wireless images across fleet of Aps; & Cisco DDNAC or Prime Infrastructure for centralized monitoring. Create & manage Cisco TAC tickets as required & report status to Customer. Develop, manage, report, & document IPAM & VLAN management. Design, configure, manage, monitor, troubleshoot, report, document, & secure network circuits & connections. Design, configure, manage, monitor, troubleshoot, report, document, & secure network access controls, administrative authentication, & logging on both.edu LAN & BYOD CampusNet wireless network via Cisco Secure ACS or Cisco ISE. Coordinate with DISA or commercial providers for installation, testing, & troubleshooting of WAN/Cloud circuits. Create & update accurate physical & logical network diagrams & rack elevations for.edu LAN & BYOD CampusNet wireless network to include all supported locations. Create & update systems architecture documentation to provide functional overview of solution; map technology capabilities & components to requirements. Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures. Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents, to include lessons learned & recommendations. Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all LAN & wireless HW, SW, OS, firmware, & tools. Support Cisco RMA & other HW & SW warranty actions IAW Government direction & processes. Install, move, & cable LAN & wireless HW such as physical routers, switches, WLCs, & WAPs in data centers & TRs at all supported locations; support technical refresh projects & changes to requirements. Update all network devices to include routers, switches, WAPs, WLCs, applications, SW, protocols, & network services IAW applicable IAVAs, IAVBs, IAVMs, MCDs, OPDIRs, CIO directives; execute patches; & report compliance as required by Government-established processes & deadlines. Assist with addressing & solving system connectivity & failure to increase network uptime. Bravura Information Technology Systems, Inc. (BITS)