Network Migration Engineer
Job Summary
The AGUN program requires an expert network engineer to manage and support the US Army's global wide area network. This role involves leading complex network migrations, overseeing operational support staff, and maintaining secure infrastructure. You will work in a remote capacity to ensure performance, security, and mission requirements are met across a global environment.
Responsibilities
- Operate and maintain US Army centralized network solutions
- Lead legacy environment discovery and migration support
- Analyze secure SD-WAN and MPLS connectivity
- Manage network optimization and resource strategies
- Ensure compliance with DoD security standards
Required Skills
- Active DoD SECRET clearance
- DoD IAT Level II (Security+) Certification
- Expertise in BGP, MPLS, VPN, and Firewalls
- Experience with Cisco/Juniper/Palo Alto technologies
- Proficiency in system hardening and DoD STIGs
Job Details
PRIMARY RESPONSIBILITIES:
• Operate and maintain secure network solutions operated as a centralized enterprise capability for the US Army.
• Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current network routing, configurations, and requirements to provide migration support for the Army global wide-area network.
• Analyze and understand secure SD-WAN and MPLS connectivity inclusive of underlay, overlay, and transport design that supports performance, quality of service, security, and mission requirements.
• Support the transformation of Virtual Routing and Forwarding (VRF), route tables, and traffic segmentation from legacy routers to the AGUN solution.
• Collect, investigate, and identify network optimization and resource management strategies and techniques to meet capacity and performance standards.
• Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture.
• Document designs, diagrams, drawings, and technical narratives using wiki technologies and common diagram and drawing tools.
BASIC QUALIFICATIONS:
• Minimum of a Bachelor's degree with varying years of experience; additional years of directly applicable experience may be accepted in lieu of a degree.
• Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.
• Heavily experienced in patching, upgrading, and lifecycle refresh of network devices.
• Demonstrated experience with networking concepts and protocols: LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), CCMP, and Firewalls.
• Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation.
• Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, Palo Alto, Dell, RAVPN, Global Protect, or AppGate.
• Experience with the following protocols: SFTP, SSH, SCP, BGP, MPLS, SNMP, NTP.
• Must be able to work as part of a team to execute troubleshooting and resolve complex network issues.
• Must be willing to work non-standard shifts to accomplish network migration objectives and goals.
• Excellent written and verbal communication skills.
• Able to directly interface with customers.
• Must be willing to travel up to 10% of the time.
PREFERRED QUALIFICATIONS:
• Army/DISA migration experience.
• Certified Cisco Network Professional (CCNP) or equivalent.
• Experience with virtualized network devices and infrastructure.
• Hands on experience with Cisco SD-WAN.
• Hands on experience with Palo Alto Next Generation Firewalls (NGFW).
• Knowledge and use of NetSecOps technologies including git, Gitlab CI/CD, Ansible, Terraform, Puppet, and network element managers.
• Working knowledge and understanding of Python.
• Demonstrate expertise in design and improvement of complex and geographically enterprise networks.
• Expert knowledge of US Army security requirements for network infrastructure.