Land Mobile Radio (LMR) Network Engineer

Nextgen is seeking a candidate with a broad engineering background to support US Marshals hosted infrastructure supporting agents in the field. Infrastructure includes Compute, Storage, Virtualization, Networking and Applications. In addition to on-premise equipment, individual will support hosted infrastructure in Azure GovCloud. Candidate shall have vast experience creating and maintaining robust network architectures to provide high availability and resiliency.

Required Qualifications

• Top Secret (Individuals with currents Secret clearance may be considered.)
• 5 years’ experience planning, designing, troubleshooting, and optimizing network configurations and architectures
• Manages Cisco routers, switches, and firewalls; installs, configures, operates, and troubleshoots high availability routed and switched networks
• Candidate must be proficient with the configuration, software/firmware upgrade, and troubleshooting processes of the following platforms:

• o ISR 4000 Series Routers
• o Cisco Nexus Switches
• o Cisco ASA firewalls
• o Knowledge on build in Firepower
• o Cisco AnyConnect VPN
• o Cisco FTD firewalls
• o Managing FTD firewalls via Cisco's FMC
• o Implementing URL filtering rules
• o Implementing SSL Inspection
• o Cisco ISE

• Manages design, configuration, optimization and enhancement of two networks with more than 100 remote sites, telecommunications (local and wide area networking, Transmission Control Protocol/Internet Protocol (TCP/IP) and web-based technologies)
• Designs and drafts network diagrams and concepts for modernization of the current and future on-prem and cloud-hosted infrastructures
• Applies thorough understanding of IT best practices, methods, and techniques to install, maintain, integrate, and support IT hardware, software, and services; makes recommendations and develops improvements of work methods for solving IT system related problems
• Performs incident management and coordinates with service providers and other agencies to maintain network continuity
• Proficiencies in deploying and maintaining security templates and configuration baselines following agency guidelines such as DoD STIGS for network equipment
• Actively applies thorough knowledge of software and systems development life cycles, including performance measurement principles and methods and ensuring incorporation of appropriate security measures
• Utilizes application load balancers to improve the security and availability of network resources
• Manages Cisco ISE for device administration, posturing, and profiling
• Experience with SolarWinds
• Leverages SolarWinds modules for configuration changes and repository, performance monitoring, and alerting
• Maintains remote access VPN via Secure Endpoint

Desired Qualifications

• A candidate with experience in the configuration, software/firmware upgrade, and troubleshooting processes for the following additional attributes is highly desirable but not required:

• o CCNA Route and Switch – Data Center
• o CCNP Route and Switch
• o Cisco AMP
• o Cisco’s Unified Computing System (UCS)
• o Cisco Duo MFA for VPN and network & server administration
• o Cisco Wi-Fi technologies and wireless access controllers
• o CradlePoint mobile routers with onboard modems and SIMs
• o Palo Alto firewalls and VPN
• o Azure networking tools including Azure load balancers, NSGs, and vNets
• o Deploying devices in Azure Gov using custom ARM templates
• o SMS gateway services
• o WAN bonding