Apply on Employer Site

By Light Professional IT Services · 7 hours ago

IP Network Test Engineer

Fort Meade, MD

Full-time

Onsite

Senior Level

$150K/yr - $250K/yr

By Light Professional IT Services LLC is a company that supports defense, civilian, and commercial IT customers worldwide. They are seeking an IP Network Test Engineer responsible for assessing, testing, and recommending solutions for the DISN IP backbone, including providing technical security expertise and Tier III support for the DoD's NIPRNet backbone network.

GovernmentInformation ServicesInformation Technology

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Provide technical expertise in design review, lab testing & test report, implementation plan and deployment of new advanced large-scale complex DoD networks

Implement MPLS services offerings on the DISN network. MPLS services include L3VPN, L2VPN, VPLS (Virtual Private LAN service) and CsC (Carrier Supporting Carrier). Platforms tested include Juniper MX Series, Cisco ASR Series routers

Provide technical security expertise in design, test, evaluation and deployment of advanced large-scale complex DoD networks. Review security requirements set by DoD agencies for the NIPRNET/SIPRNET network protection; Assess and analyze current NIPRNET/SIPRNET network architecture; Propose and analyze potential solutions

Conducting audits, risk assessment, threat analysis, contingency planning and implementing security standards and methods

Reviews security threats to the current DoD NIPRNet/Internet gateway IA infrastructure, architecture, and technology and determines/implements effective countermeasures IAW established policies/regulations/directives

Delivers Router and Firewall Test Plans, Test Reports, as well as Implementation Plans to provide direction for deployment in the production environment. Prepare field recommendations and Configuration Guides

Provide Tier III engineering support to field operations personnel and deliver Field Support Lessons Learned reports

Conduct market research to find products to meet requirements

Qualification

IP NetworkingMPLSRouting ProtocolsNetwork SecurityCCNP-EnterpriseJNCIP-ENTDoD 8570-01-MTraffic GeneratorsInterpersonal SkillsVerbal CommunicationWritten Communication

Required

BS in Networking, Telecommunications, or related area required

CCNP-Enterprise or JNCIP-ENT or equivalent routing and switching experience

DoD 8570-01-M IAT Level I or higher to include one of the following: A+ CE, CCNA-Security, CND, Network+ CE, SSCP Security+, GSEC, SCNP, SSCP, or CISSP

Extensive experience in IP networking, including IP platforms such as customer edge routers, provider edge routers, switches, firewalls, Internet Access Points (IAP's), Cloud Access Points (CAP's), Layer 2 and Layer 3 Virtual Private Networks (L2VPN and L3VPN), Internet Protocol Version 4 (IPV4), Internet Protocol Version 6 (IPV6/6VPE), Ethernet VPN (EVPN), Quality of Service (QoS), Segment Routing, Multiprotocol Label Switching (MPLS), Virtual Local Area Network (VLAN), Autonomous System Boundary Router (ABSR), external border gateway protocol (BGP) (eBGP), Layer 2 Psuedowire, Interior Gateway Protocols (IGP), Inter- Intermediate System to Intermediate System (IS-IS), Open Shortest Path First (OSPF), MPLS – Resource Reservation Protocol (RSVP), Label Distribution Protocol (LDP), Carrier servicing Carrier (CsC), Multicast, Filter Based Forwarding (FBF), Multi-Hop Bidirectional Forwarding Detection (MBFD), Ethernet Operation, Firewalls including Access Control List (ACL), Operation Administration and Maintenance (OAM) Protocol and Network Management., 802.1Q and VRRP/HSRP

Expertise in large-scale IP Networking & Testing with backbone routers (Juniper MX and Cisco ASR9K) running ISIS, BGP/MP-BGP (multi AS), MPLS routing protocols, switches and testing gear including traffic generators from IXIA, Spirent Test Center and Agilent N2X

Routing protocols: BGP, MP-BGP, MPLS/RSVP, OSPF, IS-IS, RIP, Multicast, IPv6, QoS, MACSec

Advanced MPLS (Multiprotocol Label Switching) services (L3VPN, L2VPN, VPLS & CSC)

TCP/IP, LAN/WAN, SONET, ICMP and SNMP management protocols

Minimum SECRET Clearance required

Preferred

CCIE or JNCIE or equivalent routing and switching experience

Hardware certification testing, JUNOS/IOS/IOS-XR operating system regression testing which include all protocols and services required for DISN backbone routers. Router platforms include Juniper MX960/MX480 routers and Cisco ASR9K (ASR9010/ASR9006) routers

DISN IP Design Experience

Network test equipment/Traffic Generator such as IXIA, Spirent Test Center, and Agilent N2X

Firewalls (Juniper/Netscreen, Cisco ASA/PIX, CyberGuard, SideWinder), VPN products (IPSec, SSL VPN)

IDS/IPS (Arbor Peakflow DoS & Traffic, Top Layer, ForeScout)

F5 Big-IP load balancer, BlueCoat Web Proxy

Unix (SUN/HP/BSD) Servers/Workstations, Linux, PC Servers/Workstations

VMWare ESXi server

JunOS, Cisco IOS & IOS-XR, UNIX (Sun Solaris, BSD, HPUX, SCO), VMWare, Linux, FreeBSD, Microsoft OS Servers and Workstations

Certificate Authority Server, ACE/SecureID Server, TACACS+, RADIUS, MS Exchange, Sendmail, Apache web server, PKI, WINS, DHCP, DNS, FTP/SFTP/TFTP, SSH, NTP, Netflow/Cflowd servers

Possess excellent interpersonal communication skills with the ability to interact with management and staff at all levels

Candidate should also have excellent verbal and written communication skills

MS in Networking, Telecommunications, or related area desired