Land Mobile Radio (LMR) Network Engineer

Nextgen is seeking a candidate with a broad engineering background to support US Marshals hosted infrastructure supporting agents in the field. Infrastructure includes Compute, Storage, Virtualization, Networking and Applications. In addition to on-premise equipment, individual will support hosted infrastructure in Azure GovCloud. Candidate shall have vast experience creating and maintaining robust network architectures to provide high availability and resiliency.

Required Qualifications

• Top Secret (Individuals with currents Secret clearance may be considered.)
• 5 years’ experience planning, designing, troubleshooting, and optimizing network configurations and architectures
• Manages Cisco routers, switches, and firewalls; installs, configures, operates, and troubleshoots high availability routed and switched networks
• Candidate must be proficient with the configuration, software/firmware upgrade, and troubleshooting processes of the following platforms:

o ISR 4000 Series Routers

o Cisco Nexus Switches

o Cisco ASA firewalls

o Knowledge on build in Firepower

o Cisco AnyConnect VPN

o Cisco FTD firewalls

o Managing FTD firewalls via Cisco's FMC

o Implementing URL filtering rules

o Implementing SSL Inspection

o Cisco ISE

• Manages design, configuration, optimization and enhancement of two networks with more than 100 remote sites, telecommunications (local and wide area networking, Transmission Control Protocol/Internet Protocol (TCP/IP) and web-based technologies)
• Designs and drafts network diagrams and concepts for modernization of the current and future on-prem and cloud-hosted infrastructures
• Applies thorough understanding of IT best practices, methods, and techniques to install, maintain, integrate, and support IT hardware, software, and services; makes recommendations and develops improvements of work methods for solving IT system related problems
• Performs incident management and coordinates with service providers and other agencies to maintain network continuity
• Proficiencies in deploying and maintaining security templates and configuration baselines following agency guidelines such as DoD STIGS for network equipment
• Actively applies thorough knowledge of software and systems development life cycles, including performance measurement principles and methods and ensuring incorporation of appropriate security measures
• Utilizes application load balancers to improve the security and availability of network resources
• Manages Cisco ISE for device administration, posturing, and profiling
• Experience with SolarWinds
• Leverages SolarWinds modules for configuration changes and repository, performance monitoring, and alerting
• Maintains remote access VPN via Secure Endpoint

Desired Qualifications

• A candidate with experience in the configuration, software/firmware upgrade, and troubleshooting processes for the following additional attributes is highly desirable but not required:

o CCNA Route and Switch - Data Center

o CCNP Route and Switch

o Cisco AMP

o Cisco’s Unified Computing System (UCS)

o Cisco Duo MFA for VPN and network & server administration

o Cisco Wi-Fi technologies and wireless access controllers

o CradlePoint mobile routers with onboard modems and SIMs

o Palo Alto firewalls and VPN

o Azure networking tools including Azure load balancers, NSGs, and vNets

o Deploying devices in Azure Gov using custom ARM templates

o SMS gateway services

o WAN bonding