Network Engineer

JOB TITLE: Network Engineer

AGENCY SUPPORTED: Federal Client - Commercial Solutions for Classified (CSfC) Program, Fort Meade, MD

LOCATION: Fort Meade, MD (100% Onsite)

POSITION TYPE: Full-time

CLEARANCE REQUIREMENT: Active Federal Secret clearance required prior to start

CERTIFICATION REQUIREMENT: Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, or equivalent) required.

ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.

This position will be an experienced technical resource for the ongoing deployment and sustainment of a Commercial Solutions for Classified (CSfC) solution at Fort Meade, MD. This Network Engineer role requires a strong operational background supporting network infrastructure hardware, VPN solutions, packet filtering and firewalling techniques, routing and switching, and troubleshooting. Technologies deployed within the solution include platforms such as Cisco FTD & ASA, Palo Alto Firewalls, Aruba vMC, VMware vSphere, Cisco Catalyst switching platforms, and other logging, monitoring, and security solutions.

Expectations of this role are to implement, maintain, and optimize network, firewall, and VPN infrastructure, perform new installations, troubleshoot complex nested VPN connectivity, and resolve network connectivity issues. The ideal candidate can support, manage, and maintain multiple network enclaves and elements, as well as design, optimize, and automate network operations. This role supports a solution that remains functional 24x7x365 and is embedded within the client's secure location, so a professional approach to troubleshooting and operational security is paramount.

RESPONSIBILITIES:

Provide deep hands-on support for network routers, switches, firewalls, and VPN termination appliances (both site-to-site and remote access IKEv2 VPNs).
• Plan and perform platform-level software updates and disaster recovery operations.
• Perform installation of new capability integrations and configuration of network segments with a security-first approach.
• Perform testing and documentation to report systems status and support operations.
• Diagnose, troubleshoot, and resolve hardware, software, or other network problems, and replace defective components when necessary.
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future.
• Collaborate on a multi-disciplinary team of software, test, server engineers, and operations staff.
• Provide 24x7 on-call Tier 3 escalation support for network, network security, VPN, and infrastructure outages.
• Perform other duties as required in support of the customer's mission.

REQUIRED:

• 7+ years of network engineering experience supporting large-scale global environments.
• Bachelor's degree in Computer Science, Engineering, or an IT-related discipline, or equivalent years of related technical experience.
• Active Federal SECRET Security Clearance.
• Current, active IAT Level II qualifying Cyber Security certification (Security+, CySA+, or equivalent).
• Networking knowledge: VLANs, access control, trunking, static/dynamic routing (BGP, EIGRP, OSPF), IKEv2 IPsec VPNs (site-to-site and remote access), PKI, DNS, SNMP, packet filtering, and packet analysis tools.
• Excellent written and verbal communication and organizational skills.

DESIRED:

• Current, active professional networking/security certifications (Cisco, Juniper, Aruba, Palo Alto, Fortinet).
• Direct hands-on experience with Cisco, Juniper, or Palo Alto IPS platforms and capabilities.
• Knowledge of automation strategies (Ansible, Terraform, Python/Bash/PowerShell scripting) and techniques for provisioning and operating network devices.
• Experience supporting enterprise SIEM and observability tooling.
• Experience in Commercial Solutions for Classified (CSfC) environments.
• Prior lead or management experience preferred.

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

This position is 100% onsite at Fort Meade, MD. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job; reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Individuals may need to sit or stand as needed for long periods of time throughout the day, and candidates must be able to lift 50 pounds.

For a large percentage of the work week, the environment consists of ambient room temperatures, lighting, and traditional office equipment as found in a typical business office environment, along with work in a typical data center environment.

ITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.