Senior Network Engineer

Senior Network EngineerAre you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. Amentum is seeking a Senior Network Engineer to join our team of passionate individuals in Ft.

Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation's security and intelligence mission.In support of DISA, the Intel and Cyber Division is expanding a proven team of highly skilled engineers and architects to support a program that provides critical IT capabilities to the Department of Defense. This team is committed to engineering, assembling, integrating, deploying, and sustaining an innovative IT enterprise solution.Candidates interested in joining the team must be critical thinkers, have a strong work ethic, and be able to work independently or as a member of a team in a dynamic environment that supports a critical and rewarding mission.

We value candidates who are detail-oriented while also being able to think and react quickly to emerging and unique problem sets. To be successful, you must be able to rapidly adapt and learn how to operate the front and back end of new products and processes.Work Schedule: 8 Hours per day, Monday through FridayEssential Responsibilities:Perform as senior-level contributor, able to operate and troubleshoot autonomously and independently, whether customer facing or with other engineering team members.Design, build and troubleshoot network and network security architecture.Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.Provide engineering escalation support for all network and network security operations activities including: LAN/WAN operations and troubleshooting, troubleshooting network automation and tooling, and troubleshooting network security appliances.Coordinate with the Information Assurance Security Engineers to create and validate all current and future designs against required security controls to maintain Authority to Operate of each enclave; implement and maintain DISA STIG requirements.Create, review, and update technical documentation in support of integration projects.Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.Identify and diagnose complex performance, security, and technical issues.Work Environment, Physical Demands, and Mental Demands:Employee will work in a SCIF on a daily basis.Employee may also work in a datacenter environment for specified periods of time.Minimum Requirements (Knowledge, Skills, and Abilities):Cisco Certified Network Professional (CCNP) certificationExperience designing, configuring, troubleshooting and testing: IS-IS and/or OSPF networksMP-BGP underlays and overlaysMPLS networks: RSVP-TE, LDP, and SR-MPLSComplex routing policies and protocol redistribution concepts and strategiesDMVPN and/or SD-WANCisco Firepower and Palo Alto firewalls to include Firepower Management Console and Panorama management softwareExperience deploying and testing: Cisco Identity Services Engine (ISE)New circuits with ability to fault isolate issues to CE equipment, Demarc and/or carrierNetwork security technologies including but not limited to: SSH, WAN MACsec, IPSec, RADIUS, TACACS+, firewall NAT and security policies and end-point securityExperience with MS Office applications such as Excel, Word, Outlook, and SharePoint.Ability to work both independently and as part of a team in a dynamic environment with a focus on participation in complicated design sessions.Ability to travel up to 20%.Security Clearance Required:Must have active Top Secret clearance with SCI eligibilityMinimum Education:Bachelor's Degree in an IT related field, or an additional five (5) years of Network Engineering experienceMinimum Years of Experience:10 (ten) years of network engineering w/ 3 years of network design architecture and implementationRequired Certifications:Cisco Certified Network Professional (CCNP) certificationDoD -M IAT-II baseline certification requirementsPreferred Qualifications:Extensive experience designing and building network and network security architecture so different segments in underlay and overlay partitions work together holistically to balance customer experience with security policy compliance.Extensive experience designing, building and troubleshooting Palo Alto and/or FMC/FTD NGFWs performing DPI.Extensive experience designing, building and troubleshooting ISE and/or other end-point security appliances.Experience with network tooling such as Cisco NSO, Catalyst Center, Splunk and StealthWatch.Experience with automating repetitive tasks using tools and/or scripts, such as Python and TCL.Extensive experience with Cisco routing, switching, and the network configurations underlying IP telephony systemsExperience with Type 1 encryption devices including, but not limited to: KG175X and KG142Experience developing IT checklists, SOPs, guides, etc.Experience deploying DISA STIGs and conducting Government network assessments.Compensation Details:$180,000 - $240,000The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.Benefits Overview:Health, dental, and vision insurancePaid time off and holidaysRetirement benefits (including 401(k) matching)Educational reimbursementParental leaveEmployee stock purchase planTax-saving optionsDisability and life insurancePet insuranceNote: Benefits may vary based on employment type, location, and applicable agreements.

Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.