Comply to Connect (C2C) Network Engineer Subject Matter Expert

Job Description:

Description

NexGen Data Systems is seeking a highly skilled and motivated Comply to Connect (C2C) Subject Matter Expert to join our team. The primary responsibility for the C2C Network Engineer SME is to plan, design, deploy, and continue to support a mission critical project for the Cisco Identity Services Engine (ISE) and Armis Agentless Device Security platform. Secondary responsibilities for the position include the deployment and continued support of enterprise network infrastructure systems in the areas of Route/Switch, Security, and Wireless technologies. Technologies utilized by the Enterprise Network Engineer SME.

Roles and Responsibilities:

• Network Project Documentation (NAC) – Design, plan, deploy, upgrade, and provide operational support for an Enterprise deployment of the Cisco Identity Services Engine (ISE) and Armis product for both the wired and wireless networks. In addition to the technical aspects, it includes working closely with cross-functional teams, organizing, documenting, and managing a long-term organizational ISE initiative.
• Network Infrastructure Support - Provide the required network support for the deployment of infrastructure network topology architecture, processes and reports. Investigate functionality issues related to application data, security and system configurations. Work with technical application teams in the review, analysis and resolution to application related performance issues.
• Network Administration - Perform the required work associated with network administration, such as the installation and configuration of network infrastructure, the deployment of backup and recovery processes for network, and the implementation of maintenance processes that ensure the continued stability and performance of network systems.
• Monitoring and Optimization - Manage and participate in the monitoring, optimization and diagnosis of currently deployed network systems. Provide the appropriate documentation to management, detailing the root cause analysis of outages, performance concerns, and propose resolution and optimization options.
• Security – Work closely with the Manager and the Enterprise Security Architecture Team to plan, design, implement, support, and monitor that the security initiatives are being met for the organization.
• Technical System Support – Collaborate with the Enterprise Network Engineer Service Leads and the Enterprise Network Architect to implement, configure, and support the Enterprise Network Infrastructure. Assist in the initial capacity analysis, deployment design, and overall system architecture needed to support the Network platform and expected support activity. Provide the necessary support in the investigation and resolution of system level issues.
• Additional responsibilities for the position include the deployment and continued support of enterprise network infrastructure systems in the areas of Route/Switch, Security, and Wireless technologies. Technologies utilized include: Multiple Switch vendors, Juniper, Ruckus, Aruba, Cisco switches, Palo Alto Firewall, Panorama, and Wireless. The position also requires demonstrated competence in LAN/WAN technologies.
• The C2C Network Engineer SME is responsible for the coordination of cross-functional teams in relation to the deployment and support of the physical/virtual network infrastructure, which includes technologies such as VMWare, Linux, Windows Server, physical Servers, and enterprise storage arrays.

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Desired/Required Skills:

• Active Top Secret level government clearance or higher required.
• Must meet 8140 Department of Defense compliance requirements (Security and OS certifications)
• Proven skills with network platforms (10 years’ experience) such as Cisco Identity Services Engine (ISE), Forescout, Brocade/Ruckus switches, Juniper switches, Cisco Switches, Active Directory and Firewalls in a production environment.
• Must have 6 years’ experience in network authentication protocols (802.1x, RADIUS, TACACS+, MACSEC, etc.)
• 8 + years of experience in configuration and troubleshooting of switches and routers.
• 8 years of experience with Layer 2 technology troubleshooting and configuring.
• Must have proven skill in task management of network (10 years’ experience) related projects in the Cisco Identity Services Engine (ISE) or any NAC solution. (Forescout)
• Bachelor’s Degree or higher required.
• CCNP, CCIE certification or similar required.
• SME skill level configuring and managing profiling services to identify and categorize endpoints.
• SME skill level developing and implementing posture policies to enforce compliance requirements.
• SME skill level troubleshooting issues related to profiling, posture assessments, and compliance.
• SME skill level understanding and utilizing ISE's profiling dictionaries to accurately classify devices.
• Proven skills in both verbal and written communication.
• Technical writing skills.

About the Company:

NexGen Data Systems is an emerging technologies focused company providing expert systems and network engineering solutions to the Department of Defense. NexGen Data Systems promotes a culture of knowledge and career advancement through continued learning, keeping our team current on the latest advances in systems and networking, and enabling our team to provide the best available solutions to our clients.

Benefits:

• Company covers 100% of premiums for the employee’s medical, dental, and vision insurance and subsidizes premiums for spouse and dependents.
• Company provides short and long term disability plans.
• 401(k) match up to 10% of the employee’s salary contributions to 401(K) plan.
• Comprehensive training and development program.
• 11 paid holidays and paid time off (PTO) accrual level starts at 15 days annually.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

NOTE: US Citizens and those authorized to work in the US are encouraged to apply. In order to be qualified for this position, you must be able to obtain and maintain a United States Department of Defense (DoD) security clearance. We are unable to sponsor Visas at this time. NexGen Data Systems provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.