Today
Public Trust
Unspecified
Unspecified
IT - Hardware
Oak Ridge, TN (On-Site/Office)
Job Details
Minimum Qualifications
Other Job Specific Skills
Preferred Qualifications
#CJPOST
- Serve in a dual-capacity role that balances high-level network design and architecture responsibilities with day-to-day operational support and device configuration across enterprise environments.
- Administer and maintain a multi-site enterprise network, including the configuration and lifecycle management of routers, switches, firewalls, VPNs, wireless infrastructure, and load balancing technologies.
- Develop scalable and resilient network architectures that support high availability, fault tolerance, and future growth, with an emphasis on alignment with DOE enterprise IT strategy and security policies.
- Engineer and support complex routing strategies involving protocols such as EIGRP, OSPF, and BGP; ensure optimal route redistribution, convergence, and path selection across hybrid connectivity models including DMVPN and MPLS.
- Firewall and Security Integration: Implement and manage next-generation firewall platforms (e.g., Palo Alto), including high availability configuration, SSL decryption, policy optimization, IDS/IPS system configurations, and integration with cloud and on-premises security architectures.
- Design, deploy, and manage hybrid network topologies within Microsoft Azure, including Virtual Networks (VNets), ExpressRoute, peering, NAT Gateway, and firewall solutions to ensure secure and performant cross-premise connectivity.
- Support the implementation and management of NAC solutions such as Cisco ISE, including potential integration with Microsoft Intune to enforce endpoint compliance and identity-based access control.
- Lead and execute infrastructure modernization initiatives, including the planning, implementation, and validation of new networking technologies or the re-architecture of existing environments.
- Leverage network performance tools such as Catalyst Center, SolarWinds and Azure Network Watcher to monitor availability, perform root cause analysis, and implement performance enhancements.
- Maintain accurate technical documentation including topology diagrams, configuration baselines, IP address management, and change control records to support audit readiness and operational continuity.
- Partner with adjacent IT disciplines-including cloud, systems, security-to deliver integrated solutions; provide mentorship and technical leadership to junior technical staff as needed.
Minimum Qualifications
- Bachelor's Degree in Computer Science, Information Technology, or related field or equivalent experience. Master's Degree preferred.
- Cisco CCNP (Routing & Switching or Enterprise). Microsoft AZ-700: Designing and Implementing Microsoft Azure Networking Solutions, and Microsoft AZ-104: Azure Administrator.
- 7+ years of experience.
Other Job Specific Skills
- Expert knowledge of TCP/IP, BGP, OSPF, DMVPN, DNS, DHCP.
- Cisco routing/switching with Nexus 9K, Catalyst, ISR, and C8500 series.
- Strong Palo Alto experience including SSL decryption, HA configuration, and IPS tuning.
- Azure networking including ExpressRoute, NSGs, virtual WAN, peering, VPNs.
- Familiarity with Cisco ACI or willingness to rapidly train up for deployment.
- Experience leading physical buildouts and Data Center Moves: rack layout, cable management, port planning.
- PowerShell or Python scripting for automation and config deployment.
Preferred Qualifications
- CCIE, PCNSE, or additional Azure network/security certs.
- Experience with Cisco ISE, DNA Center, and SD-WAN.
- Experience in a federal or DOE environment.
- Prior Engineering leadership in large-scale infrastructure projects to include Data Center Moves.
- Experience implementing Azure Front Door, WAF, Private Link, or NAT Gateway.
- Experience working for the Federal Government as an IT Contractor.
#CJPOST
group id: 10238000
