What are the responsibilities and job description for the Senior Network Engineer position at Metova Federal?
Overview
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.
Responsibilities
- Design, configure, and manage complex IPsec tunnel implementations, with expertise in Palo Alto and Cisco equipment.
- Develop and maintain a robust understanding of the OSI model and apply this knowledge to troubleshoot and optimize network performance.
- Configure and manage Layer 1 and Layer 2 switching concepts, leveraging Cisco and Juniper equipment.
- Support, configure, and troubleshoot Border Gateway Protocol (BGP) to ensure reliable and secure data routing.
- Implement and maintain network security measures to safeguard organizational assets.
- Collaborate with cross-functional teams to develop network strategies and address technical challenges.
- Document configurations, processes, and troubleshooting steps to ensure knowledge sharing and compliance.
- Mentor and guide junior engineers, fostering their technical growth and development.
Required Experience/Qualifications
- Bachelor’s degree in computer science, Information Technology, or a related field, or equivalent experience.
- Minimum of 5 years of hands-on experience in network engineering.
- Advanced understanding of the OSI model and its practical applications.
- Demonstrable expertise in configuring and managing IPsec tunnels on Palo Alto and Cisco equipment.
- Strong foundational knowledge of BGP and routing protocols.
- Solid understanding of Layer 1 and Layer 2 switching concepts, with hands-on experience on Cisco and Juniper platforms.
- Certifications: At least one intermediate or advanced certification in switching, firewalls, or routing (e.g., CCNP, JNCIP, Palo Alto PCNSE, etc.).
- Proven ability to simulate and troubleshoot networking scenarios in lab environments.
- Excellent problem-solving skills and attention to detail.
- Strong verbal and written communication skills.
Skills and Expertise:
- A thorough understanding of routing protocols specifically BGP, ISIS, OSPF and EIGRP
- One or more relevant certifications such as CCNP, CCIE, CCSA, CCSE, CCMSE JNCIE, VCP-NV, F5-CA, F5-CTS, F5-CSE, ACMA, ACMP, ACMX, ACDX
- Experience with next gen firewalls
- In-depth experience with Cisco devices
- Experience with internal and external DNS
- Experience with IP Address Management (IPAM) systems such as InfoBlox, Solarwinds, etc.
- Experience with monitoring tools such as Solarwinds, SCOM, Keynote, AppDynamics, Nagios
- Experience in network security including Device Hardening, IDS/IPS, SIEM, Firewalls, and IPSec, vulnerability assessment and intrusion detection
- Experience in network protocol analyzers/sniffers
- Knowledge of all types of circuits – P2P, Dark and Lit Fiber, MPLS, WAN, MAN, PRIs
- Knowledge of heterogeneous networking components along with knowledge of routing/ switching involving 100s of VLANs
- Strong planning and organizational skills in Network deployment, planning, and execution
- Flexible and adaptable when priorities shift due to changing situations
Preferred Experience/Qualifications
- Experience with additional routing protocols (e.g., OSPF, EIGRP).
- Familiarity with cloud networking solutions (AWS, Azure, or GCP).
- Automation experience using tools such as Python or Ansible.
Special Requirements/Security Clearance
Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status with ability to obtain a SECRET to TOP SECRET security clearance. Security Clearance requirements will be specified in the Government's Task Order.
