Network Engineer SME - Cisco

Responsibilities and Duties:

The candidate will be capable of performing the tasks &/or possess the skills listed below:

• Participate in the Implement, Planning, and Execution of IT network solution projects and upgrades which align with the organization's strategic goals and objectives.
• Evaluate and recommend new networking technologies and solutions to improve performance and efficiency.
• Monitor network performance and troubleshoot network issues to ensure minimal downtime, identify bottlenecks or areas for improvement, optimize throughput/performance &/or network configurations, and implement quality of service (QoS) policies to ensure efficient data flow.
• Perform regular network maintenance tasks, including firmware updates, patch management, and hardware replacements.
• Provide technical support and expertise to resolve network-related issues and outages promptly. Additionally, Candidate will generate regular reports on network performance, security incidents, and maintenance activities.
• Implement, manage, and troubleshoot new &/or existing network security measures including but not limited to firewalls, intrusion detection/prevention systems, and encryption.
• Conduct regular security assessments and vulnerability scans to identify and mitigate risks.
• Develop and enforce network security policies and procedures to protect organizational data and resources.
• Develop and update disaster recovery and business continuity plans for network infrastructure.
• Collaborate with cross-functional teams, including systems administrators, developers, and security professionals, to support IT projects and initiatives.
• Experience with Federal Security Operations Center capabilities.
• Advanced knowledge of cyber threats, tools, techniques, and processes.
• Ability to conduct vulnerability assessments and penetration tests to identify and mitigate security risks.
• Ability to monitor and analyze network traffic for suspicious activity.
• Experience with responding to security incidents and taking appropriate action to contain and remediate the issue.
• Ability to stay up to date with the latest network security threats and vulnerabilities.
• Experience with collaborating with other IT staff and stakeholders to ensure the overall security of the network.
• Maintain detailed documentation for system designs, configurations, processes, and service records.
• Lead and mentor junior team members in best practices and technical challenges.
• Organized, detail-oriented, and excellent problem-solving skills with the ability to work independently or as part of a team.
• Strong communication and documentation skills, with the ability to explain complex technical concepts to non-technical stakeholders.
• Analyzes development and implementation requirements and makes appropriate modifications to existing systems and prepares specifications based on customer requests.

Skills/Experience/Certifications:

• 10+ years’ experience with IT Network Administration demonstrating experience with design, deploy, and manage network infrastructure, including Routers, Switches, LAN, WAN, VPN, and wireless networks. Proven ability to implement, configure, and support activities with Cisco switches and Palo Alto firewalls.
• Proficient in RADIUS, TACACS+, and 802.1x utilizing Cisco Identity Services Engine.
• Knowledge, proficiency performing, and/or experience with the following items: scripting languages such as Python or PowerShell, SIEM (Security Information and Event Management) tools, cloud security technologies, developing and implementing security policies and procedures, and Palo Alto Prisma.
• Candidate will hold a ComSci/CIS/InfoSec/IT related bachelor’s degree (or higher) with ~10+ years of Network Admin work experience or an equivalent combination of education, certifications, & IT experience.
• Candidate will hold and maintain a current (or one Cisco version release previous) Cisco certification such as “Cisco Certified Network Associate (CCNA)", "Cisco Certified Network Professional (CCNP)" or higher certification. (E.G.: Cisco Certified Internetwork Expert (CCIE))
• Understanding of how to develop, identify and research new ways to interact with data and visualization to provide customers advanced awareness of the operational environment.
• Possess knowledge &/or familiarity with security hardening framework standards and regulations from Center for Internet Security (CIS) Control 4, National Institute of Standards and Technology (NIST) Special Publication 800- 53 Revision 5, and Defense Information Systems Agency’s (DISA) Security Technical Implementation Guides (STIGs).
• Bachelor’s degree in computer science, Information Systems, Cybersecurity, or related field (or equivalent combination of education and experience).