Job Details

VAE, Inc. is seeking a Network Support Engineer to join our AGUN team in Fort Huachuca, AZ.

The AGUN program is a highly demanding mission and requires expert technical and professional management to support the Army’s global wide area network and security infrastructure. You will be supporting a large and complex network migration and operations for the US Army. This role will include leadership of operations support staff and directing operational support activities for a global network. 

CLEARANCE REQUIREMENT: 
Must have and maintain an active SECRET security clearance or higher. (US Citizenship required)

Primary Responsibilities:

• Operate and maintain secure network solutions operated as a centralized enterprise capability for the US Army. 
• Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide tier III support for the Army global network.   
• Analyze and understand secure wide area connectivity inclusive of underlay, overlay, and transport design that supports performance, quality of service, security, and mission requirements.  
• Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies.  
• Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff.
• Collect, investigate, and identify network optimization strategies and techniques to meet capacity and performance standards.   
• Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture.
   

Basic Qualifications:

• Minimum of a Bachelor’s degree with 8+ years' experience or Master's degree with 6+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).
• Require network certification which shall meet or exceed a CCNA (comparable vender certification accepted upon review).
• Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.
• Heavily experienced in patching, upgrading, and lifecycle refresh of network devices.
• Demonstrated experience with networking concepts and protocols: LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and Firewalls.
• Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation.
• Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, Palo Alto, Dell, or AppGate.
• Experience with the following protocols: SFTP, SSH, SCP, SNMP, NTP.
• Must be able to work as part of a team to lead troubleshooting and resolve complex network issues.
• Excellent written and verbal communication skills.

Preferred Qualifications:

• Certified Cisco Network Professional (CCNP) or equivalent.
• Experience with virtualized network devices and infrastructure
• Hands on experience with Cisco SD-WAN.
• Hands on experience with Palo Alto Next Generation Firewalls (NGFW)
• Knowledge and use of NetSecOps technologies including git, Gitlab CI/CD, Ansible, Terraform, and network element managers
• Demonstrate expertise in design and improvement of complex and geographically enterprise networks.
• Expert knowledge of US Army security requirements for network infrastructure.