Cisco network engineer job description

Job Title: Sr Network Engineer [Wi-Fi] To support Cisco ACI Data Center Network.

Job Type: Permanent Full time career opportunity on client payroll

Location: Hybrid with min 2 days onsite @SF BAY AREA CA

Experience level:

(7) seven years of progressively responsible and directly related work experience including

minimum of 5 years of network engineering experience in critical datacenter network environments.

License/Certification: CCNA/CCNP/CCIE/ CCIE lab

Knowledge, Skills, & Abilities

Expert level knowledge of network administration, routing/switching and engineering in mission critical environments servicing large server deployments.
Knowledge of a wide variety of network equipment including but not limited to; routers, switches, firewalls, denial of service mitigation, serial consoles, and load balancers.
Requires strong working knowledge of Cisco network hardware, software, LAN/WAN connectivity, Experience managing and documenting wireless networks, overlaying APs onto CAD (or similar) blueprints for heat mapping, and with 802.11a/b/g/n/ac/ax, RF design and WLAN fundamentals.
Experience designing controller clustering, failover methods and caveats, group management, AP modes of operation, patching, RF management, similar tasks
Advanced understanding of BGP, OSPF, EIGRP, VDC, vPC and ECMP
Proven ability with wireless optimizations, including AP placement, achieving ideal signal levels, optimized roaming, spectrum selection, channel tuning, cell optimization, QoS, and more.
Strong leadership and project management abilities. Ability to lead cross-functional project teams in implementing projects of a complex nature.
Proficiency with applications (Spreadsheets, apps, systems, how to run them).
Excellent documentation and communication skills.
Must perform all duties and responsibilities in accordance with the policies and procedures, including its Service Standards and its Code of Conduct.
Design, implementation, support and maintenance of WAN, LAN, Data Center and Cisco ACI deployments to include Application Delivery Controllers and Firewalls.
Cisco wireless and related technology Wireless LAN Controllers (WLC), Mobility Services Engines (MSE), Cisco Prime Infrastructure (CPI), Wireless Access Points (WAP), AnyConnect wireless supplicant & Identity Services Engine (ISE)
Experience with Cisco ISE including configuring and maintaining DACL, Policy Sets, VLAN mapping, 802.1x, TACACS, Radius, Profiling, Posture Checking, and troubleshooting authentication failures
11i wireless knowledge including EAP methods including EAP-TLS, certificates, authentication, supplicant integration on Microsoft Windows clients.
Network operations excellence supporting a highly available, mission critical network environment.
Participation in the documentation processes including network diagrams, staff contacts, vendor contacts, utilization of monitoring/resource/inventory management tools.
Optimizing the stability and reliability of the technology's performance.
Implementing new and additional technologies that will improve the infrastructure.
Working with managers to develop standards in line with the company guidelines and monitoring those standards.
Assisting with the resolution of escalated issues and actively participating in problem management activities.
Cross-training other IT staff members in the maintenance or usage of the technology.

The Senior Network engineer with 10+ year experience performing activities required to design, build, deploy and support the enterprise LAN/WAN network comprising over 70 sites worldwide and supporting operations, production datacenters, applications, telephone and video systems and other devices. Candidates must have a strong background in routing, switching, and firewall devices/technologies and he or she must have experience with large to small network deployments.
Requirements

•Support the Enterprise production and manufacturing infrastructure consisting of Cisco switches (45xx, 9300, 9500, 4500x, Nexus platforms) and routers (ASR 100X, 4451x)
•Schedule and perform network maintenance, repair, and code upgrade tasks as needed while limiting the impact on the production network
•Work with local Engineering, Facilities Operations, and/or colocation vendors while turning up multiple/remote sites and also for decommissioning of sites.
•Create change requests to configure, change and/or deploy any new/existing devices throughout the corp infrastructure and attend CAB meeting for approval.
•Proactively contribute to documentation using Visio, update Solarwinds monitoring tools and network diagrams on regular basis
•Configure WLAN using Aruba 7220 and 7210, controller/RAP, IAPs(controller-less), APs
•Work on setting up remote offices, configure, deploy and turn up network hardware including wireless setup
•Deploy new Palo Alto 5k, 3k, or 850 firewall for new site deployments and internal security project as needed.
•Configure/change firewall rules on Palo Alto Networks Panorama. Create templates and manage devices through Panorama for new deployments and existing firewalls.
•Deploy OpenGear Out of Band console servers

Required Skills & Job Qualifications
•10+ years prior experience in a network engineering position, with heavy network engineering experience including router, switches, WAN acceleration, WAN service providers and technologies, wireless networking, and routing protocols, especially BGP and OSPF.
•Possesses experience in implementing established solutions to support the effective operations of an element(s) of the infrastructure.
•Technical expertise in IP networks, IP routing and switching, layer 2 protocols, network troubleshooting including packet tracing, BGP, OSPF, 802.11 wireless technologies, WAN circuit technologies.

Additional Position Requirements
•Experience with a variety of IT infrastructure and network security systems such as Cisco router and switches, Cisco WAN acceleration, and Aruba wireless.
•Knowledge and understanding of establishing/improving/maintaining operational procedures and processes for IT Infrastructure.
•Experience working with a managed service provider

Education
•Bachelor's Degree in Computer Science, Information Systems, Business Administration or other related field is preferred. 4+ Years with BS/BA, 2+ Years with MS/MA or MBA

Leidos is hiring a Cisco ISE Engineer. All work will be performed onsite at the National Maritime Intelligence Center in Suitland, MD. An active TS/SCI is required to be considered.
Primary Responsibilities

- Provide network engineering support and install, operate, configure, optimize, and maintain the Cisco Identify Services (ISE) tool for the enterprise; provide network engineering expertise to deploy Cisco ISE network access control features (e.g. IEEE 802.1x modules).

-Implement, configure and administer CISCO ISE.

- Install, operate, configure, optimize, and maintain the RedSeal tool for the enterprise; provide network engineering expertise to build-out the enterprise network map, develop and maintain a prioritized list of concern areas based on threat vectors identified by the tool, and help the team fully use all features of the tool in support of the CYBERDEP mission.

- Capture and refine information security requirements and ensure their integration into information technology components and information systems through purposeful security design and configuration.

- Identify and Access Management (IdAM) Solutions, Multi-Factor Authentication (MFA) and Public Key Enablement systems

- Provide remediation recommendations and mitigating strategies for vulnerabilities discovered and maintain in-depth knowledge of DISA Security Technical Implementation Guidance (STIG), STIG technologies such as Tenable Nessus, STIG Viewer, Security Requirements Guides (SRG), Security Content Checker (SCC), STIG benchmarks, open-source tools such as Vulnerator, and other automated tools that assist with the assessment of security controls and the presentation of security assessment results.

- Support the development, documentation and delivery of training and training materials on all cyber tools, software, processes and policies.

Basic Qualifications

- Active DoD TS/SCI Clearance

- BS in Engineering/Technical discipline and 11+ years of relevant experience OR a MS and 9+ years of relevant experience. Additional experience may be considered in lieu of degree.

- Active CCNA Security, CISSP or CASP or similar certification

-A minimum of 1yr. CISCO ISE administrator experience

-ACISCO related certification is required, CCNA, etc.

HOPPER

Pay Range:Pay Range $113,100.00 - $174,000.00 - $234,900.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

#Featuredjob

REQNUMBER: R-00095322

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Leidos will consider qualified applicants with criminal histories for employment in accordance with relevant Laws. Leidos is an equal opportunity employer/disability/vet.