Network Engineer

Job Description:

We are looking for an experienced Network Engineer/Subject Matter Expert (SME) to support the planning, development, implementation, and maintenance of network software and equipment for a public sector client's IT Network and communications infrastructure. The Network Engineer/SME will provide recommendations to technical personnel and IT Leadership and work closely with the client's network staff. This role requires a high level of expertise in network design, architecture, and security.

Responsibilities:

• Technical and Project Management Support:
• Manage objectives to accomplish assigned work.
• Develop business models, systems, technological architecture, and tactical information systems plans.
• Carry out tasks necessary for network management, including design, configuration, change management, and problem resolution.
• Analyze requests for network engineering work and provide recommendations.
• Network Architecture:
• Review, recommend improvements, and assist in optimizing existing network architecture.
• Assist in planning and designing new on-premises network infrastructure.
• Assist in planning and designing cloud networks and hybrid connectivity.
• Regularly review network architecture for security gaps and improvements.
• Incorporate network security best practices (Zero Trust, microsegmentation, encryption, etc.) into all network design and planning.
• Network Maintenance Planning:
• Develop and maintain maps, drawings, and diagrams of the customer's network.
• Work to improve maintenance processes and reduce customer-affecting network incidents.
• Consult with operations groups and provide status updates to ensure standardization.
• Assist in developing requirements for enhancing or replacing existing networking systems.
• Network Management:
• Coordinate and implement software code upgrades on all network equipment during maintenance windows.
• Coordinate and implement the installation of new network equipment and products.
• Coordinate and implement the removal of network equipment.
• Assist in the evaluation and response to cybersecurity incidents.
• Standards & Documentation:
• Develop and author standards for network services.
• Document standard hardware and software configurations.
• Develop and author standard operating procedures for network products & services.
• May be required to work day, evening, or night shifts, weekends, holidays, and overtime; may be responsible for being on-call in case of an emergency.
• Travel to any location within the client's state of operation on short notice, including evenings and weekends.

Minimum Education and Work Experience:

• BS in Engineering, Computer Science, Telecommunications or Operations Research AND 5 years of experience required, OR 10 years of relevant work experience in a multisite data center environment.
• Experience in network systems engineering, network design, and management and operations.
• Experience with Cisco and Palo Alto firewalls, focusing on security, efficiency, and intrusion prevention/detection.
• Broad knowledge of Palo Alto specific implementations of SDWAN and associated services.
• Broad knowledge of UCaaS/Contact Center implementation, Telco integration, resiliency, migration, and support.
• Detailed knowledge of TCP/IP network addressing, including both IPv4 and IPv6 implementations.
• Expert knowledge of Frame Relay, TDM T1, Ethernet switching, TCP/IP, SNMP, Layer 2, 802.1Q, Layer 3, routing protocols (OSPF & BGP), MPLS, VPLS, and VRF.
• Experience troubleshooting complex network challenges (Asymmetric routing, out-of-order packets, unicast/multicast issues, Latency, spanning tree, retransmission, fragmentation).
• Experience troubleshooting and designing complex switching environments (e.g., Cisco Nexus switch line).
• Experience troubleshooting and designing detailed layer 2 and layer 3 network environments (VLANs, trunk/access ports, Port Channels, EtherChannel, VPCs, VTP, CDP, LLDP, MTU, SPAN, port mirroring, etc.).
• Experience with troubleshooting tools like Sniffer, Wireshark, Ethereal, and the ability to follow packet/data flows.
• Ability to design, implement, and troubleshoot advanced routing environments (OSPF, EIGRP, route leaking, policy-based routing, route tagging, distance vector).
• Ability to design, implement, and troubleshoot device security protocols (TACACS, RADIUS) in an AAA-based environment.