Junior Network Engineer

Overview

SOSi is currently seeking an experienced Junior Network Engineer to join our team in Joint Base Pearl Harbor Hickam, Honolulu, Hawaii . The customer based out of Honolulu, Hawaii creates, manages, and supports IT solutions for our customer, its mission and its 5,000+ customers throughout the Pacific theater. Our team solves challenging technical problems that enable our customers to realize critical and time sensitive C2 strategies.

Essential Job Duties

As a Junior Network Engineer at SOS International LLC, you will serve as a Subject Matter Expert (SME) for network/transport (LAN/BAN/WAN) initiatives within the customer's Area-of-Responsibility (AOR). Your role includes conducting network systems analysis and recommendations, configuring Layer-2/Layer-3 devices, implementing approved changes on the production enterprise/data center networks, and coordinating and participating in the customer's IT architecture/engineering efforts alongside the Systems Engineering, Systems Operations, Network Operations, and the Enterprise Service Desk (ESD) teams.

• Design, develop, and implement approved LAN/BAN/WAN/cryptographic architectures to support data integration plans. Determine functional testing strategy and document results.

• Design, develop and implement National Security Agency (NSA) approved Commercial Solutions for Classified (CSfC) capability packages and Taclane encryption methods.

• Configures, supports, and troubleshoots External Border Gateway Protocol (eBGP) routing within a Palo Alto environment.

• Provides Tier-3 support to network-related issues. Reviews and troubleshoots network, transport, and protocol related issues. Acts as a point of incident escalation and coverage.

• Develops, documents, and standardizes network configurations.

• Performs network discovery and assessment: inventories & identifies network architecture and components (e.g., network devices, IOS versions, device capabilities/configurations, IP addresses/subnets, VPNs, circuit information, WAN protocols etc.). Employ scripts and related network tools to automate data-collection of networking components and relevant network device configurations.

• Coordinates internal and external resources relevant to network and secure transport engineering initiatives.

• Reviews Customer requirements and recommends solutions to include List of Materials (LOM), proposals and related supporting documents (e.g., solution diagrams, implementation timelines, etc.)

• Interact with circuit providers (e.g., DISA) and manage (coordinate) required circuit actions.

• Upholds the integrity and security of network devices and systems according to Department of Defense (DoD) Secure Technical Implementation Guidelines (STIGs).

• Reviews work efforts/implementations and contributes to analysis, After-Action-Reports (AAR). Regularly collects and summarizes pertinent network-related accomplishments, issues, and concerns. Completes activity reports in accordance with contract requirements.

• Ensures compliance of custody and ownership of Government equipment and related components.

• Participates in related solution technologies and special projects, as required.

Minimum Requirements

• An Active in-scope SECRET clearance and US Passport.

• DoD 8570 IAT-II compliant (Security+ CE, CCNA-Security, CND, CySA+, GICSP, GSEC, or SSCP).

• Cisco Certified Network Administrator (CCNA) certification at hire, to obtain Cisco Certified Network Professional (CCNP) Enterprise or Security certification within 6 months.

• Bachelors degree in IT, Networking, Cyber Security, or similar, or 4 years of experience in enterprise IT network engineering and operations involving complex classified DoD environments and mandatory security controls (e.g., STIGs).

• 2+ years implementation and support to Layer-3 networking. Extensive experience with Cisco's routing and switching portfolio. Experience in implementing and supporting DoD secure network environments (firewalls, encryption/SSL, network separation, VLANs, tunnels, TACLANES etc.)

• 1+ years firewall experience. Familiar with Next Generation Firewall technologies, firewall implementation, routing, protocol analysis, threat prevention and troubleshooting.

• Experience with NSA CSfC requirements including Multi-Site Connectivity Capability Package (MSCCP) and Mobile Access Capability Package (MACP).

• Experience with Cross Domain Solutions (CDS) and/or DISA Trusted Network Environment (TNE)

• Customer-service oriented with a willingness to participate and assist.

• Able to follow instructions and work both independently and in a (distributed) team environment.

• Team-player. Able to communicate effectively, verbally and in writing.

• Attention to detail. Excellent planning and time-management skills.

• Able to support 24/7 operations (including support to exercises), when necessary.

Preferred Qualifications

• Cisco Certified Network Professional Enterprise or Security certification.

• Active In-Scope Top Secret clearance is preferred.

• Additional IT certifications in relevant technology platform (e.g., Cisco, Citrix, Dell, HPE/Aruba, ITIL, Juniper, Microsoft, Nutanix, Palo Alto, VMware)

• Experience with Palo Alto Network Security Platform and/or Cisco Secure portfolio.

• Experience with Forcepoint/Everfox and/or Juniper technologies.

• Familiarity with Zero Trust Architecture (ZTA).

• Familiarity with VDI/Virtual Environments and solutions (VMware Horizon, Citrix VDI)

• Familiarity with Hyperconverged Infrastructure (HCI), Multi-factor Authentication (MFA) and C2 applications.

• Experience in ITIL framework and best practices (e.g., Change Management, Configuration Management, Capacity Planning)

• Experience using Help Desk software (e.g., Jira, Remedy, ServiceNow).

Work Environment

• Working conditions are normal for an office environment.

• Fast paced, deadline-oriented environment.

• May require foreign travel and site visits.

• May require periods of non-traditional working hours including consecutive nights or weekends.