*Due to the nature of the work being performed US Citizenship is required* Job Title: Network Engineer Location: Lexington MA 02420 Onsite Requirements: Experience with general dynamics encryption - Gem one encryptors. Juniper and palo alto networks Maintaining compliance for STIG's - Background with STIG security is critical.

Summary: The Enterprise Technology and Tools (ETT) Team provides resources to assist with compliance execution, reporting, and vulnerability-remediation activities. These services are offered across the Laboratory through the ISD Embedded System Administrator (ESA) Group. In addition, the ETT Team is responsible for the overall operation of monitoring tools.

Such tools include SolarWinds, the Laboratory's IT service management (ITSM) tool (Footprints), and the Laboratory's central visibility tool-BigFix. Job Description: Network Design and Engineering responsibilities include but not limited to: Design, implement and maintain a secure, robust and fault tolerant network infrastructure. Monitor and update configurations to maintain STIG compliance.

Perform code, software and firmware updates as needed to ensure network infrastructure is kept up to date with current versions. Research, develop and implement automation to support the items noted above and enhance our network infrastructure. In collaboration with the CES infrastructure team, develop and execute a plan to integrate classified cloud services with our existing on-premises networks.

Provide project support to internal teams where expertise in classified networks is required. Provide day-to-day guidance, mentoring and tasking to members of the CES Network Team. On very rare occasions if the team is understaffed network Support responsibilities include but not limited to: Provide 1st tier support resolving Service Desk tickets.

Maintain security documentation and network diagrams. Required Minimum: Experience with Juniper network hardware. Experience with Palo Alto firewalls.

Experience with General Dynamics type 1 encryptors and the GEM One management software. Experience with network automation (preferably with Ansible) Experience with cloud network integration (preferably classified cloud) Expert knowledge of TCP/IP, DNS, DHCP, SNMP and BGP protocols. Strong understanding of DoD networks and STIG security controls Security+ certification or the ability to obtain within 6 months.

Demonstrated ability to learn new technologies and disciplines quickly. Ability to work independently toward delivery of goals as well as collaborate in team efforts. Strong foundational skills in organizing and managing technical projects.

Excellent customer service skills (verbal and written) Bachelor's degree in a relevant field or the equivalent technical experience and certifications. Must Have: Certification Security+ certification (or the ability to obtain within 6 months of employment) Degree Level Bachelor's Degree Experience: Currently holds a Secret Clearance (OR a higher clearance) Networks TCP/IP, DNS, DHCP, SNMP and BGP protocols - 7 years Security DoD STIG's - 7 years Soft Skills: Strong customer service skills and communication Software General Dynamics type 1 encryptors and the GEMOne management software - 2 years Software Tools: Network automation (preferably with Ansible) - 2 years Systems Cloud network integration (preferably classified cloud) - 2 years Preferred: Experience with the Command Cyber Readiness Inspection (CCRI) process and maintaining an inspection ready environment