Job Title: Cloud Network Engineer
Location: REMOTE
Clearance: Must be eligible to obtain a US Public Trust
Contact: [email protected]

System One is seeking to hire a Cloud Network Engineer to support a major, large-scale, multi-cloud enterprise development effort for a prominent US Federal Cabinet Agency. This effort aims to facilitate holistic multi-cloud solutions to meet the agency's enterprise-wide infrastructure needs. This position will be responsible for managing the configuration, installation, and ongoing support of the Network Infrastructure, which includes Palo Alto firewalls, Cisco VPN Concentrators, Cisco CSR devices, as well as Networking in cloud platforms such as Azure and OCI. The candidate for this position should have extensive hands-on technical skills designing and deploying various network technologies in cloud platforms. The scope of this position includes network design, implementation, and support for all components within cloud platforms. This position will need to be adept at monitoring the ongoing operation of the network and identifying potential issues and corrective actions as needed.

RESPONSIBILITIES:

• In-Depth knowledge and hands-on experience with major cloud platforms, such as Azure, OCI and GCP.
• Comprehensive knowledge of cloud security best practices and ability to implement security measures within cloud networks.
• Strong understanding of networking protocols and technologies, including TCP/IP, DNS, DHCP, VPN, BGP and OSPF.
• Strong understanding of Virtual Private Clouds (VPCs) and subnets to meet the organization's performance and security requirements.
• Experience with software-defined networking (SDN) and virtual networking concepts.
• Experience with identity and access management (IAM) in cloud environments
• Experience with installation of various network devices and services (e.g., routers, firewalls, load balancers, VPN, QoS)
• Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations for any third-party network devices in cloud platforms.
• Work with the existing network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control in cloud platforms.
• Monitor performance and ensure system availability and reliability
• Monitor system resource utilization, trending, and capacity planning
• Provide Level-2/3 support and troubleshooting to resolve issues

REQUIREMENTS:

• Must be a US Citizen and eligible to obtain a US Federal Public Trust
• Bachelor's degree and seven 7) or more years of related experience, or Master's and four (4) or more years of related experience.
• Strong experience working with Terraform
• Need to have experience with AWS Security group deployment using Terraform
• Experience with cloud or on-prem devices such as Cisco and Palo Alto firewalls
• Working technical knowledge of TCP/IP networks and standards (IEEE 802.1)
• Must have experience with EKS Cluster.
• Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM)
• Experience with Palo Alto firewalls
• Experience configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs
• Strong knowledge and understanding of TCP/IP network technologies; DNS, DHCP, TFTP, NAT, and SSL.
• Participation in 24/7 on-call rotation is required for this role

DESIRED:

• Azure Fundamentals, GCP or Oracle Cloud Certifications
• CCNP or Higher (CCIE and/or CISSP highly valued)
• PaloAlto Networks Certified Network Security Engineer (PCNSE)

System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

#M1
#LI-CD1
Ref: #851-Rockville-S1