Sr Principal Network Engineer

The Sr Principal Network Engineer shall design, install, configure and troubleshoot wired and wireless network architectures. This includes routers, switches, VPN, IDS/IPS, SIEM, wireless access points, controllers, and other supporting devices and software used for monitoring, data collection and network security.

Applicant must currently hold at minimum a DoD Secret Clearance

The applicant’s required technical competencies shall include

· Bachelor’s degree with 10+ years of experience installing, configuring, troubleshooting wired and wireless networks

· Experience implementing and enforcing 802.1X/802.11 standards on networks.

· Experience working WPA Enterprise encryption standards.

· Thorough knowledge of and experience with firewall applications, set up, maintenance and troubleshooting.

· Thorough knowledge of and experience with IPS / IDS

· Knowledge of and experience with VPN concentrators. Worked with FIPS level encryption standard over networks.

· Knowledge of and experience with implementing and managing a certificate authority for PKI

· Ability to use tools to detect rogue access points

· Ability to integrate wired and wireless networks to other enterprise systems

· Experience mitigating and isolating wireless attacks.

· Thorough knowledge of and ability to use various wireless client tools to detect and resolve issues

· Thorough knowledge of switches and routers (CCNP or better), CCIE desired

· Thorough knowledge of networking fundamentals including VLANs, subnets, protocols, and standards

· Thorough knowledge of and experience with Windows 10 and Server 2012 operating systems and Microsoft Active Directory. Principles, deployment and troubleshooting Active Directory applications in a large Enterprise environment.

· CompTIA Security+ or CCNA Security (DoD 8570 compliant)

· Network Operating System Certification (Cisco/Juniper/Aruba preferred)

· Microsoft Operating System Certification

The applicant’s recommended technical competencies shall include

· Knowledge of HP Aruba wireless controllers. This includes the ability to create new wireless LANs, configure anchor controllers, configure APs, and configure wireless security and authentication.

· Knowledge of HP Aruba wireless access points and the ability to deploy and configure them.

· Knowledge of Aruba ClearPass

· Knowledge of and ability to use HP Aruba tools and software to analyze issues

· Knowledge of Juniper SRX VPN/firewalls and Juniper QFX switches series

· Knowledge of Cisco ASA firewalls and VPN concentrators.

· Knowledge of Cisco routers and switches and ISE

· Knowledge of Nessus, Solarwinds, StealthWatch

· Knowledge of Bluecoat Proxy

· Knowledge of OPSF, BGP, Multicast, IPv4, IPv6, QOS

· Knowledge of VMWare, Esxi

· Knowledge of Visio, able to create network diagrams, able to present how the network works.

· Microsoft Server 2012 and Active Directory.

All your information will be kept confidential according to EEO guidelines.