Land Mobile Radio (LMR) Network Engineer

Job description

Nextgen is seeking a candidate with a broad engineering background to support US Marshals hosted infrastructure supporting agents in the field. Infrastructure includes Compute, Storage, Virtualization, Networking and Applications. In addition to on-premise equipment, individual will support hosted infrastructure in Azure GovCloud. Candidate shall have vast experience creating and maintaining robust network architectures to provide high availability and resiliency. ### Required Qualifications - Top Secret (Individuals with currents Secret clearance may be considered.) - 5 years’ experience planning, designing, troubleshooting, and optimizing network configurations and architectures - Manages Cisco routers, switches, and firewalls; installs, configures, operates, and troubleshoots high availability routed and switched networks - Candidate must be proficient with the configuration, software/firmware upgrade, and troubleshooting processes of the following platforms: o ISR 4000 Series Routers o Cisco Nexus Switches o Cisco ASA firewalls o Knowledge on build in Firepower o Cisco AnyConnect VPN o Cisco FTD firewalls o Managing FTD firewalls via Cisco's FMC o Implementing URL filtering rules o Implementing SSL Inspection o Cisco ISE - Manages design, configuration, optimization and enhancement of two networks with more than 100 remote sites, telecommunications (local and wide area networking, Transmission Control Protocol/Internet Protocol (TCP/IP) and web-based technologies) - Designs and drafts network diagrams and concepts for modernization of the current and future on-prem and cloud-hosted infrastructures - Applies thorough understanding of IT best practices, methods, and techniques to install, maintain, integrate, and support IT hardware, software, and services; makes recommendations and develops improvements of work methods for solving IT system related problems - Performs incident management and coordinates with service providers and other agencies to maintain network continuity - Proficiencies in deploying and maintaining security templates and configuration baselines following agency guidelines such as DoD STIGS for network equipment - Actively applies thorough knowledge of software and systems development life cycles, including performance measurement principles and methods and ensuring incorporation of appropriate security measures - Utilizes application load balancers to improve the security and availability of network resources - Manages Cisco ISE for device administration, posturing, and profiling - Experience with SolarWinds - Leverages SolarWinds modules for configuration changes and repository, performance monitoring, and alerting - Maintains remote access VPN via Secure Endpoint ### Desired Qualifications - A candidate with experience in the configuration, software/firmware upgrade, and troubleshooting processes for the following additional attributes is highly desirable but not required: o CCNA Route and Switch – Data Center o CCNP Route and Switch o Cisco AMP o Cisco’s Unified Computing System (UCS) o Cisco Duo MFA for VPN and network & server administration o Cisco Wi-Fi technologies and wireless access controllers o CradlePoint mobile routers with onboard modems and SIMs o Palo Alto firewalls and VPN o Azure networking tools including Azure load balancers, NSGs, and vNets o Deploying devices in Azure Gov using custom ARM templates o SMS gateway services o WAN bonding