Network Engineer - Ts/Sci

Marathon TS is looking for a Network Engineer for a direct placement opportunity with one of our large enterprise clients.

Top Secret/SCI Security Clearance Required

Location: Herndon, VA

Occasional travel to customer locations for meetings

Responsibilities:

• Maintain health of laboratory network equipment, such as switches, routers, firewalls, and networking tools and applications.
• Lead technical projects through its entirety: research, conceptualization, feasibility assessment, design, procurement, lab test and evaluation, implementation planning, training, documentation, and transition to the operational environment.
• Create technical documents including network drawings, test plans, test reports, implementation plans, and white papers.
• Collaborate in the design of the network enterprise including IP address schemes, routing/switching, segmentation, and security.
• Serve as Tier III support to an enterprise network operations center through in-depth analysis of complex networking problems.
• Provide mentoring and technical/engineering advice to junior engineers.
• Knowledgeable in security requirements and techniques for protecting computer systems/networks from attacks, viruses, data tampering, unauthorized system entry, and other emerging threats.
• Continue education/training in disciplines necessary to perform duties.

Required skills:

Expertise in Layer 2 and Layer 3 protocols and technologies: IS-IS, BGP/MP-BGP (multi AS) and MPLS routing protocols, Resource Reservation Protocol (RSVP), Label Distribution Protocol (LDP), MPLS Layer-2/Layer-3 Virtual Private Network (VPN), OSPF, Multicast, etc.

IPV4/IPv6 management protocols, Filter Based Forwarding (FBF) Multi-Hop Bidirectional Forwarding Detection (MBFD) Ethernet Operation, Firewalls including Access Control List (ACL), Operation Administration and Maintenance (OAM) Protocol and Network Management with 802.1Q and VRRP/HSRP Certificate Authority Server, ACE/SecureID Server, TACACS+, RADIUS, FTP/SFTP/TFTP, SSH, NTP, SNMP

Proficient with security protocols: 802.1x, IPSEC, MACSEC, SSL/TLS, TACACS+, RADIUS, etc.

Experience with router regression testing.

Experience writing technical document writing.

Familiarity with COMSEC practices and cryptographic devices.

Proficient with test tools, e.g. Ethernet test sets, packet captures, protocol analyzers, and the ability to analyze test data.

Computer literate in MS Office apps and MS Visio.

Must possess considerable business acumen.

Ability to quickly adapt to advancing technologies and procedural changes.

Ability to coordinate and communicate effectively with other technologists and business partners to maintain high service levels in a demanding environment.

Technical certifications

DOD 8570.01 IAT Level II (Security+ CE, GICSP, GSEC, CND, SSCP)

CCNP or JNCIP required. CCIE or JNCIE desired.

Education or Equivalent Experience

Bachelor's degree in an IT related field and at least six years of experience in enterprise network design.

12 years of experience in lieu of degree.

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").