Network Engineer

Job Description

• The Monitoring Systems Administrator performs complex functional activities and project management for the USPS.
• They will be expected to regularly exercise independent judgment, as well as high level of analytic skill, in solving complex technical problems for the USPS in the Windows and Linux based monitoring environments.
• This individual serves as the focal point for problem resolution by interacting with USPS employees and (multiple) equipment and application vendors to ensure proper application installation and operation, and problem resolution.
• The individual will also serve as the trainer and mentor to the Monitoring Systems Administrator, junior position at various times.
• This individual will be expected to work independently with a minimum of guidance or direction.
• This individual may be required to work long and varied schedules to support diverse and complex USPS production environments.

Responsibilities

• Administer CISCO ISE
• Configure, administer, document custom policies for Network Access Controls
• High level troubleshooting of network and application issues
• Adhere to strict Information Systems security guidelines in all cases.
• Working as Network Access Controls (NAC) ISE Engineer in managing, planning, and designing a framework for authenticating and authorizing national clients via various methods: to include dot1x and profiling; and to enforce compliance across remote VPN, wireless, and wired networks.
• Manage and build Cisco ISE VMWare servers: to include certificate management, licensing, and Integration with 3rd party application servers.
• Manage Cisco ISE Guest Network environment and users accounts.
• Assist in the onboarding and introduction of new endpoints onto the network via investigative testing and probing of endpoint attributes, protocols, and behavior; to culminate in the creation and/or assignment of appropriate policy.
• Utilize Splunk to drive reporting and search for data collected from Cisco ISE.
• Perform packet captures and TCP dumps to analyze application traffic to troubleshoot issues related.
• Provide support for ISE related issues, including off-shift and weekend support functions.
• Utilize ServiceNow application to monitor troubleshoot and track all ISE related tickets.

Required Skills

• Cisco ISE
• Security device management
• Traffic and log analysis
• Strong understanding of TCP/IP, UDP/IP, DNS, DHCP
• Knowledge of TCP, understanding network, protocol, and application traffic flows
• Ability to troubleshoot basic network issues including IPv6.
• Proven ability to multi-task
• Knowledge of best practices and IT operations in an always-up, always-available service
• Manages time effectively.
• Creative thinking skills
• Detail-oriented personality.
• Ability to maintain effective communication and working relationships with co-workers.
• Works on high-visibility, or mission critical aspects of a given program, and performs all functional duties independently.
• Oversees the efforts of direct reporting resources and/or be responsible for the efforts of all staff assigned to a specific job.

Desired Skills

• Firewalls
• Proxy
• Switches/routers (Juniper Mist/Fortinet/Aruba)
• Cyber Security Skills
• Network and Log Analytics
• Proficient with application layer protocols HTTP, SSH, SSL, etc.

Education

• A minimum of thirteen (13) years relevant experience.
• A degree from an accredited College/University in the applicable field of services is preferred. four additional years of relevant experience in lieu of a college degree is required.
• If the individual s degree is not in the applicable field, then four additional years of related experience is required.