Land Mobile Radio (LMR) Network Engineer

Position Overview Nextgen is seeking a candidate with a broad engineering background to support US Marshals hosted infrastructure supporting agents in the field. Infrastructure includes Compute, Storage, Virtualization, Networking and Applications. In addition to onpremise equipment, the individual will support hosted infrastructure in Azure GovCloud. Candidate shall have vast experience creating and maintaining robust network architectures to provide high availability and resiliency. Qualifications Top Secret (Individuals with current Secret clearance may be considered) 5 years’ experience planning, designing, troubleshooting, and optimizing network configurations and architectures Manages Cisco routers, switches, and firewalls; installs, configures, operates, and troubleshoots high availability routed and switched networks Proficient with configuration, software/firmware upgrade, and troubleshooting processes of the following platforms: ISR 4000 Series Routers Cisco Nexus Switches Cisco ASA firewalls Knowledge of built‑in Firepower Cisco AnyConnect VPN Cisco FTD firewalls Managing FTD firewalls via Cisco's FMC Implementing URL filtering rules Implementing SSL Inspection Cisco ISE Manages design, configuration, optimization, and enhancement of two networks with more than 100 remote sites, telecommunications (local and wide area networking, TCP/IP and web‑based technologies) Designs and drafts network diagrams and concepts for modernization of the current and future on‑prem and cloud‑hosted infrastructures Applies thorough understanding of IT best practices, methods, and techniques to install, maintain, integrate, and support IT hardware, software, and services; recommends and develops improvements of work methods for solving IT system related problems Performs incident management and coordinates with service providers and other agencies to maintain network continuity Proficiencies in deploying and maintaining security templates and configuration baselines following agency guidelines such as DoD STIGS for network equipment Actively applies thorough knowledge of software and systems development life cycles, including performance measurement principles and methods, and ensures incorporation of appropriate security measures Utilizes application load balancers to improve the security and availability of network resources Manages Cisco ISE for device administration, posturing, and profiling Experience with SolarWinds Leverages SolarWinds modules for configuration changes and repository, performance monitoring, and alerting Maintains remote access VPN via Secure Endpoint Additional desirable (but not required) skills: CCNA Route and Switch – Data Center CCNP Route and Switch Cisco AMP Cisco’s Unified Computing System (UCS) Cisco Duo MFA for VPN and network & server administration Cisco Wi‑Fi technologies and wireless access controllers CradlePoint mobile routers with onboard modems and SIMs Palo Alto firewalls and VPN Azure networking tools including Azure load balancers, NSGs, and vNets Deploying devices in Azure Gov using custom ARM templates SMS gateway services WAN bonding Professional Responsibilities Design, configure, optimize, and enhance network architectures for hundreds of remote sites. Develop network diagrams and modernization concepts for on‑prem and cloud infrastructures. Manage incident response and coordinate with external service providers. Create and enforce security baselines following DoD STIGs. Implement application load balancing to improve security and availability. Use SolarWinds for monitoring and alerting. Maintain VPN access via Secure Endpoint. Equal Opportunity Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. #J-18808-Ljbffr