Minimum of 3 years in network administration and management
Cisco Certified Network Associate (CCNA) or higher
Hands-on experience with Palo Alto Networks firewalls
Experience with Cisco firewalls and enterprise switching
Knowledge of routing protocols and VPN technologies
Familiarity with enterprise WiFi technologies
Experience with network monitoring tools
Ability to prioritize workload and manage multiple customers
Excellent communication skills and ability to collaborate with diverse teams
Must possess an active Public Trust or be able to obtain one
Responsibilities
Provide dedicated network support to assigned customers
Maintain and upgrade customer networks with proper configuration control
Administer and troubleshoot Palo Alto and Cisco firewalls
Manage Cisco routing and switching infrastructure
Administer enterprise wireless networks and security policies
Analyze network performance and capacity measurements
Ensure all network components are monitored and managed
Develop and maintain network topology diagrams and documentation
Support network security operations and compliance activities
Coordinate with external organizations for network services
Work with engineering and account management to resolve incidents
Participate in maintenance windows and respond to urgent issues
Benefits
Medical, Dental and Vision insurance
Health Savings Account and Flexible Spending Account
Short-term and Long-term Disability insurance
Supplemental life insurance and AD&D
Comprehensive 401k plan
Paid Time Off options
Full Job Description
About this Position / Responsibilities
Provide dedicated network administration and engineering support to one or more assigned NFF customers, serving as a trusted technical resource for customer IT and operations staff
Maintain and upgrade customer networks using documented processes that ensure proper configuration control, change management, traceability, and integrity
Administer, configure, and maintain Palo Alto and Cisco firewalls, including rule base management, policy design, VPNs, and firmware/software upgrades
Administer, configure, and troubleshoot Cisco routing and switching infrastructure, including VLANs, trunking, routing protocols, and access-layer through core
Administer, configure, and troubleshoot enterprise wireless (WiFi) networks, including controllers, access points, SSIDs, and wireless security policies
Capture and analyze performance and capacity measurements for network components, including circuit utilization and latency on WAN/backbone and aggregation circuits, and CPU and memory utilization of routers, switches, and firewalls
Validate that all network components are properly monitored and managed; identify any components that cannot be monitored and provide recommendations to mitigate the associated risk
Develop, validate, and maintain physical and logical network topology diagrams and configuration documentation that clearly convey baseline configuration, performance, and capacity
Establish and maintain network performance and capacity baselines using real-time data collection and monitoring tools
Support network security operations, including risk analysis and assessment, system monitoring, intrusion detection/prevention, and firewall design, development, and maintenance
Support customer security and compliance activities, including vulnerability remediation, configuration hardening, and providing documentation and evidence to customer security officers as required
Provide technical support in the planning and integration of new IT systems hosted in cloud (IaaS/PaaS) and hybrid environments
Coordinate with external organizations, partner agencies, carriers, and service providers in support of external network links and services as directed
Work closely with the NFF engineering team and account management to resolve incidents, escalate issues, and deliver a consistent customer experience
Participate in planned maintenance windows and respond to after-hours or urgent issues on an ad hoc basis as needed
Qualifications
Minimum of 3 years of experience in network administration, architecture, management, and deployment
Cisco Certified Network Associate (CCNA) or higher
Working knowledge of routing protocols (OSPF, BGP, EIGRP), VPN technologies, and network segmentation
Familiarity with enterprise WiFi technologies, including 802.11 standards, wireless controllers and access points, RF fundamentals, and wireless authentication (802.1X/RADIUS)
Experience with network monitoring, performance, and capacity management tools
Demonstrated experience with Change Management and configuration control processes and procedures
Ability to support multiple customers and to prioritize workload across competing demands, proactively react to issues, and adjust to shifting deadlines
Must reside within commuting distance of Washington, DC and be able to work onsite at customer facilities multiple days per week, as well as on an ad hoc basis as needed
Must be able to work independently without supervision and be comfortable interacting with all levels of customer staff, from engineers to IT leadership
Excellent written and oral communication skills and proven ability to collaborate effectively with technical and non-technical staff
Proficiency in Visio, Excel, Word, PowerPoint
Must possess an active Public Trust or a previously held Public Trust, and be able to obtain or reinstate a Public Trust as required by the customer
Highly Preferred:
Experience supporting federal government customers and familiarity with federal security frameworks (NIST, FISMA, TIC)
Experience in a managed services, NOC, or technology VAR/systems integrator environment
Experience with AWS networking, including VPC design, subnets, route tables, security groups, Transit Gateway, and hybrid connectivity (Site-to-Site VPN, Direct Connect)
Familiarity with Ekahau or similar wireless planning and survey tools, and experience performing wireless site surveys (predictive, pre-deployment, and post-deployment validation)
Relevant industry certifications in any of the following areas: Cisco (CCNP Enterprise or Security), Palo Alto (PCNSA/PCNSE), CompTIA Security+, ITIL, AWS, Microsoft Azure
Bachelor's degree in computer science, engineering, or other technical discipline
Physical / Work Environment Requirements:
Ability to work in telecom closets, data centers, and equipment rooms, including physical cable tracing, labeling, patching, and rack-and-stack installation of network equipment
Ability to lift up to 50 lbs, use ladders, and work in tight, confined, or overhead spaces
Ability to stand, walk, kneel, and bend for extended periods while performing onsite work in varying customer site conditions
Occasional after-hours or weekend work to support maintenance windows, cutovers, and project schedules
NFF Disclosures
NFF offers a competitive salary, comprehensive benefits and flexible paid time off options, for eligible employees:
Medical, Dental and Vision, Health Savings Account, Flexible Spending Account
STD, LTD, Supplemental life insurance and ADD&D
Comprehensive 401k plan
Paid Time Off
About NFF, Inc
NFF, Inc. is a technology company that provides IT consulting, integration, and managed services to businesses and government agencies. The company was founded in 1996 and is headquartered in Herndon, Virginia. NFF's services include network infrastructure, data center, cloud computing, cybersecurity, and unified communications. The company has more than 200 employees and serves clients in a variety of industries, including healthcare, finance, and government. NFF is known for its technical expertise and customer service.
