Network Engineer - SME

You need to sign in or
create an account to save a job.

Job Description

What's it like realizing your potential at an innovative company that takes on some of the world's most important challenges? Rewarding. As a member of our Defense Intelligence Technology team, you will join a diverse group of driven professionals who design the products and systems that support enhanced military capabilities, protect national security, and keep critical information and infrastructure secure. With us, you will be able to make an impact while you hone your skills and grow in your career.

We are looking for a Network Engineer/Subject Matter Expert to add their skills to our team supporting infrastructure services and enterprise engineering efforts for DIA IT Infrastructure Services and networks. This is an exciting and dynamic job opportunity where you will support a dynamic operational customer, and help advance the United States military's analytic and operational capabilities.

In this job, you will:
- Architect WAN solutions based on requirements involving advanced/complex global networks, hybrid data centers, security, and virtualization technologies; as well as development of fault and performance management policies and automation rules; deliver formal presentations when necessary. Ultimate responsibility for the technical integrity of work performed and deliverables associated with the Network Engineering area of responsibility and interact with the Government regarding Network Engineering technical considerations and for associated problems, issues, or conflicts.
- Work individually or as a key member of a senior technical team; lead resolution of complex technical issues and/or performs research of high-end technical solutions.
- Provide expert guidance and recommendations to senior-level Government and Vendor decision-makers, technicians, and managers; direct multiple contractor and subcontractors teams through to project completion.
- Design, prototype, test, and integrate new technologies into local and wide area network architecture for a global and highly complex environment.
- Program and configure a full stack of network equipment including routers, switches, firewall, load balancers, wireless, and timing equipment.
- Plan the design, implementation, and migration of future architecture
- Take charge in translating project requirements into standard or custom technical solutions for a service provider wide area network and cloud environment.
- Lead the design, build and test of Cloud Networking and Security services such as edge and core firewalls, proxies and load balancers, direct network connections with public cloud providers such as express route, direct connect, etc.
- Proactively seek opportunities to drive efficiency, automation, and cost reduction by automating manual and repetitive tasks, and actively document requirements for evolution of existing standard solutions, patterns, and features.
- Develop features and codified networking artifacts for platform improvements leveraging automation and infrastructure and network policies as code
- Write documentation and deliver presentations in response to customer requirements/interest in new technologies/products and in support of the development for a future architecture.
- Develop documentation, design, and detailed plans for network improvements, optimization, and deployment
- Install and support network equipment for global WAN and SD-WAN systems
- Administer and support Server, VMware, and Nimble storage systems
- Configure and install software, servers, routers and other network devices
- Monitor network performance and integrity
- Automate tasks and monitor their effectiveness
- Create, oversee, and test security measures (e.g., access authentication and disaster recovery)
- Develop improvements to network performance, capacity, and scalability
- Provide advanced troubleshooting and problem resolution of complex network problems
- Manage the transition and migration of networks and development of network addressing scheme

Required Education, Experience, & Skills
Education and Experience
• High School Diploma + 16 years
• Associate's Degree + 14 years
• Bachelor's Degree + 12 years
• Master's Degree + 10 years
• PhD + 8 years
Bachelor's Degree in Computer Science, Electrical or Computer Engineering or a related technical discipline, or the equivalent combination of education, technical training, or work/military experience
Active TS/SCI clearance and ability to obtain and maintain a CI polygraph
8570 Information Assurance Technical (IAT) Level II certification (Security+ or other) Training and Certifications

Required Experience includes:
10+ years' experience managing large, globally-distributed network architecture, engineering and leveraging next-generation network designs and technologies, to support large-scale deployments
• Strong technical design/architecture expertise in enterprise networking (e.g., SDN, SD-WAN, SDA etc.), strong technical knowledge of foundational networking technologies, and solid understanding of the SDN ecosystem
• Technical knowledge of common routing protocols (e.g., OSPF, BGP), IPv6, VPN, etc. across a global distributed network
• Hands-on experience with data center fabric platforms (Cisco, Arista, Checkpoint, Ciena, Juniper, Palo Alto, and F5, or equivalent) and hands-on experience with common routing and switching platforms (Cisco, Juniper, HP/Aruba etc.)
• Proven experience re-engineering complex Internet-based network designs to optimize for services and applications that are sensitive to network turbulence (e.g., latency, jitter, loss)
• Proven experience driving operational performance through defining and enforcing Recovery Time Objective (RTO) and Recovery Point Objective (RPO) Service Level Agreements (SLAs)
• Proven track record of driving transformation in network technologies, tools, and processes through a data-driven continuous improvement methodology
• Demonstrated experience in improving security, stability, reliability, performance, and agility of complex enterprise networks
• Proven experience leading highly effective technical teams through major technology and organizational change
• Experience researching emerging technologies and trends, standards, and products and synthesizing into clear technology road maps and strategies; familiarity with current networking trends, including commercial implementations of SDN for Campus, Data Center, and/or WAN environments
• Possess skills to manage exceptionally complex, inter-disciplinary, and inter-organizational tasks
• Strong understanding of network infrastructure automation, instrumentation, and monitoring platforms and the emerging technologies in this area
• Experience in setting up virtual private clouds in public cloud infrastructure such as Amazon Web Services, Microsoft Azure, Alibaba Cloud, or Google Cloud Platform
• Experience designing and engineering connectivity to public cloud providers using technologies such as AWS Direct Connect, Azure ExpressRoute, Google Dedicated Interconnect, or Oracle FastConnect
• Experience driving and/or significantly participating in vendor RFPs for network products (e.g., hardware, software, tools, telco, services)
• Possess excellent written and verbal communication skills
• Ability to work independently and manage multiple project and priorities
• Experience operating heavy-load movement equipment (e.g., pallet jacks, chassis lifts, etc.)
• Ability to lift 50 lbs

Preferred Education, Experience, & Skills
Bachelors degree in a STEM field
Active TS//SCI clearance with CI Poly

Preferred/Desired Skills:
• Technical certifications preferred (e.g., CCNA, CCNP, CCIE, ACE-A, ACE-P)
• Expert knowledge of networking and network-based software applications and performance, modeling, and system/network simulation analysis tools
• Advanced knowledge of TCP/IP (IPv4 & IPv6) and related large scale network features
• In-depth understanding of switching ASICs from multiple providers
• Deep experience in WAN and campus LAN design and implementation
• Strong background in all multi-vendor routing, switching, and security platforms
• Understanding of networking protocols (e.g. BGP4, OSPF, IPSEC, HSRP, 802.11, and QoS)

Experience with:
• Open Standard routing and switching protocols (i.e., MP-BGP, OSFP, VRRP, MLAG, and STP)
• Network segmentation,encapsulation/encryption technologies (i.e., VRF, MPLS, EVPN, VXLAN, L2VPN, L3VPN, Pseudowire, GRE, IPsec, and MACSEC)
• High Availability (HA), Active-Active resilient architectures
• Campus Area Network technologies (Wi-Fi, PoE, NAC/802.1x, QoS, A/V)
• Design and implementation experience with CLOS networking and SDN
• WAN architectures (i.e., Carrier Ethernet, Optical Fabrics (OTN), SONET, DWDM)
• ZTP protocol
• Load balancing and Application Delivery Controller technologies and implementations
• Network tuning and optimization (DCTCP, ECN, QoS) and virtualization
• Network Boundary (Next Generation Firewalls, IPSEC/SSL VPN Concentrators)
• Network Management/Troubleshooting tools (i.e., NetFlow Tracker, Cisco LMS, Cisco Call Manager, Arista CloudVision Portal, SolarWinds, tcpdump, Wireshark, Elastic, and Splunk)
- Demonstrate Dev/Ops knowledge varying levels of experiences with one or more of the following: Ansible, JSON and Rest API, Infrastructure as Code, Linux shell, Python, TCL, Go Language, Kafka, Grafana, Jenkins / Git, Machine Learning (e.g., TensorFlow), Hadoop and clustered big data, Kubernetes, VMware, Docker, Virtual Box, Data Visualization
- Familiarity with data center structured cabling, fiber plant, power, and cooling
- Functional, working knowledge, and ability to code in Ruby and Python
- Experience with configuration management platform (Puppet, Ansible, Salt, Chef, etc.)
- Experience with automating network functions through tools such as Chef, Puppet, Ansible, or Terraform/ experience with writing Python applications to support network automation

About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.

Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.

At BAE Systems, we celebrate the array of skills, experiences, and perspectives our employees bring to the table. For us, differences are a source of strength. We're laser-focused on high performance, and we work hard every day to nurture an inclusive culture where all employees can innovate and thrive. Here, you will not only build your career, but you will also enjoy work-life balance, uncover new experiences, and collaborate with passionate colleagues.