Network Engineer - Principal
- US-VA-Warrenton
- Full-time
- Posted
Skills
Job description
Purpose and Impact:
In support of a challenging, critical, and rewarding program, Amentum is seeking a Principal Network Engineer to lead full-lifecycle IT infrastructure, hardware, and service transitions across our program. You will drive cross-functional delivery efforts—spanning Procurement, Change Management, Logistics, Production, Engineering, Network Architecture, and Customer Project Management teams. In this role, you will guide voice, video, and data capabilities from initial concept through full operational deployment in DISA/DoD environments.
Work Schedule: 5 Days (Mon – Fri); 8 hrs/Day; 40 hrs/wkly
Essential Responsibilities:
The duties and responsibilities of the Principal Network Engineer include, but are not limited to the following:
•Perform as primary Subject Matter Expert to Government Leaders with knowledge and experience in local and wide area networking, communications, data center operations and related software/hardware within a multi-platform operating environment.
•Manage team of 10-15 Network Engineers in both operation and maintenance of existing enterprises as well as development and integration of emerging capabilities.
•Ensure engineering rigor to manage multiple projects and initiatives using an industry accepted systems development life cycle model (i.e. INCOSE V, Waterfall, etc.)
•Provide support to a wide array of customers as part of a complex team of multiple contractors and government personnel.
•Provide support for all information systems operations activities, including computer and communications operations, data control, LAN/WAN administration and operations support, operating systems programming, system security policy procedures, and operations.
•Analyze and develop new hardware requirements and prepare specifications for hardware acquisitions.
•Provide recommendations and conduct research for new technologies, future concepts, and analysis for implementation of deployable solutions (mobile and transportable) design integration, Interoperability of systems and services with mission partners, and Virtualization and Software Defined Networking (SDN) design integration.
•Review site design packages from the Site Design team for technical accuracy.
•Design and plan network communications systems.
•Research and recommend to the Configuration Management Board new or replacement models of hardware or software to support the engineering roadmap.
•Provide information to the life cycle team for hardware that is reaching end of life or end of service/support.
•Coordinate with the Information Assurance Security Engineers to validate all designs against required security controls to maintain Authority to Operate of each enclave.
•Create, review, and update technical documentation in support of integration projects.
•Provide full implementation documentation and templates for all phases of deployment and sustainment of network equipment and services.
•Provide engineering support to the Network Operations Center, and support implementation and sustainment teams as needed.
•Identify and diagnose complex performance, security, and technical issues.
•Develop and implement solutions across a wide range of technologies.
•Implement and maintain DISA STIG requirements.
•Stay current on most technological developments and applications and help to evaluate vendor products to make recommendations for purchase.
•Oversee the day-to-day O&M management of all enterprise network connectivity and data center network infrastructure operations, policies, and procedures.
•Analyze and resolve network and data center work problems, or assist employees in solving work problems
•Lead enhancement efforts to deliver new techniques/solutions to optimize and secure infrastructure and monitoring systems.
•Confer and work efficiently and effectively with other departments to plan and deliver enhancement projects, operational changes, related schedules, resources and progress reporting
•Be responsible for O&M’s team’s troubleshooting efforts to isolate and diagnose common system problems; document system events to ensure continuous functioning.
•Train, mentor and motivate team to meet individual, team and contractual obligations and thresholds while ensuring individual career growth and development.
•Devise new techniques to expedite workflow, improve productivity, and improve operating environment.
•Evaluate customer-submitted technology initiatives, enhancement requests, and modernization requirements.
•Conduct technical feasibility assessments for proposed projects and capability enhancements.
•Analyze existing architectures, operational constraints, dependencies, cybersecurity implications, and infrastructure impacts.
•Develop high-level and detailed engineering solution options.
•Analyze alternatives and conduct trade studies to identify optimal technical approaches.
•Estimate hardware, software, licensing, infrastructure, labor, and lifecycle support costs.
•Develop Rough Order of Magnitude (ROM) estimates, budget projections, and implementation timelines.
•Identify technical, operational, programmatic, and cybersecurity risks associated with proposed initiatives.
•Assess mission benefits, operational impacts, return on investment, and performance improvements.
•Produce technical white papers, engineering assessments, briefing materials, and executive recommendations.
•Present findings and recommendations to customer leadership, technical review boards, and program management offices.
•Participate in architecture review boards, configuration control boards, and technical review meetings.
•Support strategic technology planning and modernization efforts across the enterprise.
Minimum Requirements (Knowledge, Skills, and Abilities):
•Must have active Top-Secret clearance with SCI or the ability to acquire Top Secret/SCI
•12 years of experience in network and data center architecture design and management with at least 3 years focused on implementing Cisco ACI and Next Generation Firewalls (NGFW) solutions (Cisco Firepower and Palo Alto PAN-OS/Panorama)
•Prior experience serving as Lead Engineer engaging with Senior Government Technical Personnel to communicate design solutions and O&M activities.
•Min 5 years’ experience directing cross-functional engineering teams to deliver full lifecycle support for IT infrastructure, O&M activities, and documenting system performance to ensure continuous function.
•Demonstrated experience with the design of highly available/high performance/highly scalable redundant networks and ISP management, SDWAN implementation, IPAM, and IPv6 design and deployment at the enterprise and data center
•Must be able to Implement Cisco Nexus Dashboard and ACI fabric architectures (VXLAN, Spine-Leaf topology, and APIC controller management) for multi-data center environment, to include the design and optimization of ACI fabric and spine-leaf architecture
•Must be able to configure tenant policies, endpoint groups (EPGs), and implement ACI contracts, filters, service graphs, and L4-L7 integrations with firewalls and load balancers
•Prior experience developing automation scripts using Python, Ansible, or Terraform for network configuration and policy enforcement application profiles
•Be able to Integrate ACI with multi-datacenter environments for VMware and Acropolis AOS VM environments.
•Knowledge of or experience with implementing Zero Trust Security policies within ACI and ensure compliance with industry standards
•Be able to use APIC, SNMP, Syslog, and telemetry tools for proactive monitoring and performance tuning
•Must be able to implement Cisco Data Center solutions - Nexus switches (9K series), UCS, BE7K and data center management planes
•Experience designing and troubleshooting Layer 2/3 networking architectures and understanding of internetworking routing protocols and technologies (TCP/IP, VPLS, DMVPN, EIGRP, BGP, OSPF, VRRP, HSRP, NHRP).
•Experience with Type 1 line encryption devices including, but not limited to the following: KG175, KG250, KG250xs, etc.
•Experience with network security best practices, and technologies including, but not limited to, SSH, IPSec, RADIUS, TACACS, firewall policies, and 802.1x.
•Experience implementing network performance management solutions (SolarWinds, NetScout Infini Stream, and Gigamon Deep Observability) and troubleshooting with packet, session and log data.
•Working knowledge of Cisco IP telephony products as well as knowledge of interconnection of multiple IP telephony systems via LAN and WAN connections.
•Familiarity with datacenter infrastructure and experience with Cisco routers (Cisco ISR and ASR series) and switches including, but not limited to the following: 35xx, 37xx, 38xx, 45xx, 65xx, Nexus 9xxx, 7xxx, 6xxx, 5xxx, 2xxx, 1xxx series.
•Hands-on experience with implementation and use of network monitoring, fault management, and performance analysis tools such as Syslog, SNMP, What’s Up Gold, SolarWinds, Scrutinizer, etc.
•Demonstrated application of the ITIL framework to deliver IT Service Management for an enterprise information system
•Demonstrated experience leading technical teams and mentoring engineers.
•Proven ability to develop technical documentation, engineering designs, and executive-level presentations.
•Proven experience making recommendations that improve customer mission effectiveness and operational efficiency.
•Must be able to work a 40-hour work week, normally Monday through Friday
•Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
•Ability to travel (5-10%) primarily within 75 miles
•Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project and Visio
•Exceptional attention to detail; excellent verbal and written communication skills; strong critical thinking, organizational, time-management, and problem-solving skills
•Ability to work both independently and as part of a team in a dynamic environment
Security Clearance Required:
•Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Minimum Education:
•Bachelor’s degree in a relevant technical field, or equivalent experience that demonstrates capability in IT , telecommunications, or systems engineering within DoD environments.
Minimum Years of Experience:
•12 years of relevant experience
Required Certifications:
Must possess or be able to obtain the Cisco Certified Network Professional (CCNP) and one of the following 8140 IAT Level II or III baseline certifications before start date:
•Level II certs include – CCNA Security, CySA , CND, Security CE
•Level III certs include – CASP CE, CCNP Security, CISA, CISSP (or Associate)
Preferred Qualifications:
•Master of Science in Information Technology, Computer Science or Engineering
•Cisco Certified Enterprise Infrastructure - CCIE
•Palo Alto Networks Certification - Network Security
•Experience with ITIL
•Experience with ServiceNow
#javelin #jointhepack #itil #cisco #projectassessment #networkengineer #network
This position is not designated as a safety sensitive position.As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government.
Other Responsibilities:
Safety - Amentum enforces a safety culture whereby all employees have the responsibility fo