Network Engineer IV - HHS STIM
Remote
Full Time
HHS STIM
Experienced
Job Description: Network Engineer IV
Duties and Responsibilities
- Design, deploy, configure, and manage network infrastructure including routers, switches, LAN, WAN, VPN, and wireless networks.
- Implement, configure, and support activities with Cisco switches and Palo Alto firewalls.
- Configure, deploy, manage, and troubleshoot IP phones using Cisco Unified Communications Manager (CUCM).
- Utilize RADIUS, TACACS+, and 802.1x with Cisco Identity Services Engine (ISE).
- Participate in planning, implementation, and execution of IT network solution projects and upgrades aligned with organizational strategic goals.
- Evaluate and recommend new networking technologies and solutions to improve performance and efficiency.
- Monitor network performance, identify bottlenecks, optimize throughput, and implement QoS policies to ensure efficient data flow.
- Perform network maintenance including firmware updates, patch management, and hardware replacements.
- Conduct regular security assessments, vulnerability scans, and implement mitigation measures.
- Develop and enforce network security policies and procedures to safeguard organizational data and resources.
- Implement, manage, and troubleshoot firewalls, IDS/IPS, encryption, and other security technologies.
- Support Federal Security Operations Center capabilities and collaborate with cross-functional IT teams.
- Conduct vulnerability assessments, penetration testing, and respond to security incidents effectively.
- Provide detailed documentation of system designs, processes, and service records.
- Mentor junior team members and provide technical leadership on complex projects.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Systems, Information Security, or related field, with 10+ years of IT Network Administration experience, or equivalent combination of education, certifications, and IT experience.
- Extensive hands-on experience with Cisco routers, switches, firewalls, and VPN technologies.
- Proficiency with Cisco Identity Services Engine (ISE), RADIUS, TACACS+, and 802.1x.
- Strong expertise in CUCM for IP phone configuration and management.
- Advanced knowledge of cyber threats, tools, techniques, and processes.
- Experience with SIEM tools, cloud security technologies, and scripting (Python, PowerShell).
- Ability to conduct vulnerability assessments, penetration testing, and traffic analysis.
- Proven experience collaborating with Federal Security Operations Centers (SOCs).
- Excellent communication skills with the ability to translate technical concepts for non-technical audiences.
- Organized, detail-oriented, with strong analytical and problem-solving abilities.
Certifications
Candidates must hold and maintain a current (or one version release previous) Cisco certification such as Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE). Palo Alto certifications such as PCNSA, PCCSE, or PCNSE are highly desirable.Security and Compliance
- Candidates must demonstrate familiarity with security hardening frameworks and compliance standards including CIS Control 4, NIST SP 800-53 Rev. 5, and DISA Security Technical Implementation Guides (STIGs).
Apply for this position
Required*