Job Requirements
Rockville, MD
Public Trust Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Summary
Required Qualifications
Preferred Qualifications
- Serve as the hands-on technical lead for HRSA's enterprise network, leading a team of three network engineers and working directly with the HRSA client counterpart.
- Design, plan, implement and maintain enterprise LAN/WAN, Zscaler and network security infrastructure, including routers, switches, firewalls and remote access systems.
- Act as the top escalation point for complex network, firewall, VPN and authentication problems, using Wireshark packet captures, SolarWinds, Riverbed, Grafana and Cribl to find root cause.
- Plan and execute Cisco switch and firewall software upgrades, technology refresh and enhancements during scheduled maintenance windows under change management.
- Implement and support RSA SecurID / RSA Authentication Manager integrated with VPN, RADIUS and LDAP, and Cisco Identity Services Engine (Client) for network access control.
- Design, implement and troubleshoot IPv4 and IPv6 network architectures; manage Azure network security groups (NSGs).
- Drive vulnerability remediation and TLS certificate renewals; keep the network compliant with federal and HHS policy, including backup and recovery.
- Own network-security standard operating procedures (SOPs), network diagrams and technical documentation; coach and develop less-experienced engineers.
- Partner with project managers to deliver network projects on time and within scope; evaluate new technologies and coordinate hardware, software and vendor procurement.
Required Qualifications
- Bachelor's degree or an equivalent combination of education and experience.
- 10+ years of network engineering experience in federal or enterprise-level IT environments.
- 5+ years leading a team of network engineers while remaining hands-on, and working directly with a client counterpart.
- Expert troubleshooting of complex network issues, including packet-capture (PCAP) analysis with Wireshark.
- Cisco ASA 5500 / Firepower firewalls (required); Palo Alto firewalls managed with Panorama.
- Expert Cisco switching, including network software upgrades; LAN/WAN routing and switching; IPv4 and IPv6.
- Zscaler, Cisco IPsec VPN troubleshooting and Cisco Identity Services Engine (Client).
- RSA SecurID / RSA Authentication Manager and network authentication protocols (RADIUS, LDAP).
- Azure networking with network security groups (NSGs).
- SolarWinds, including automation scripts; Riverbed, Grafana or Cribl for monitoring and troubleshooting.
- Vulnerability remediation, TLS certificate renewal and installation, and change management processes.
- Writing, maintaining and implementing network-security SOPs and technical documentation (required).
- Willing to work onsite after hours and on weekends for maintenance windows and to take part in the on-call rotation (required).
- Strong problem-solving, communication and organizational skills.
- Able to pass a Public Trust (NACI / Tier 1) investigation; must have lived in the U.S. at least 3 of the last 5 years.
Preferred Qualifications
- NetScaler / Citrix Client experience.
- Experience supporting HHS or other federal civilian agency networks.
- Current or recent federal Public Trust investigation.
- CCNP / CCIE, Palo Alto PCNSE, Zscaler or Cisco Client certifications.
group id: 10216532
