Senior Network Engineer

Company Overview At Hexagon US Federal we provide cutting-edge technologies and a wide range of professional services to enable our customers to make smarter and faster operational decisions and improve mission effectiveness. Hexagon US Federal is an independent subsidiary of Hexagon Corporation exclusively focused on bringing the broad range of Hexagon technologies to the US Federal government and its partners.

Position Description: Hexagon US Federal is seeking an experienced Senior Network Engineer with a cyber security background. Working as part of the overall IT team, appointee will be responsible for supporting and maintaining the IT infrastructure with special attention towards information security and networking along with some general IT support. The position requires in-depth knowledge of networking devices and cyber security disciplines. Appointee will also provide research, design, and implementation of security improvements and security controls and provide firewall and network management.

Required Qualifications:

• United States citizenship.
• Minimum 5-7 years of experience in direct support of enterprise networking.
• Highly skilled with hardware, operating systems, and networking in both general office and data center environments.
• Network switch installation/deployment, stacking, configuration, and management.  LACP/LAG switch-to-switch and switch-to-host management. Copper and Fiber cable management.
• Experience with management of Palo Alto firewalls, including Panorama, High Availability setup, FIPS operating mode, GlobalProtect client VPN, SSL Decryption, App-ID updates, User-ID deployment.
• Strong experience in building site-to-site IPsec tunnels, routing protocols, VLANs, threat prevention and intrusion detection/protection.
• Firewall management including upgrades, security policies, routing, client/server VPN, and disciplines with configuration change control within a team environment.
• Wireless network management, access point configuration and management.
• Thorough knowledge of OSI model and TCP/IP protocol stack at all network layers, network topologies, static and dynamic routing protocols.
• Solid experience with NAT, SSL/TLS, LDAP, RADIUS, SNMP, DHCP, DNS, NTP, protocols and implementations.
• Experience with network monitoring and log management software tools such as WhatsUpGold, Nagios, Grafana, Cacti, NetFlow, etc.
• Create installation and configuration documents including visual network diagrams using tools such as MS Visio.

Preferred Qualifications:

• Experience with IEEE 802.1X port-based network access control.
• Familiarity with support technologies such as VMware, Linux, MacOS, Windows AD, Group Policy configuration, Azure AD, two factor authorization methods, dynamic routing protocols (BGP), and cyber-IT security tools.
• Knowledge and familiarity with security standards and federal compliance regulations (e.g., NIST, DFARS, CMMC, FedRAMP).
• Detail oriented with attention to scientific problem solving, critical thinking, strong organization skills, and forensic approach to security investigation.
• Good communication skills - written and verbal.
• Any experience with Ivanti Pulse Secure Connect, ArubaOS-CX, Ubiquiti, Cisco, Dell, HP hardware.
• Relevant professional industry certifications in networking and IT security.
• Bachelor's Degree in Computer Science, Computer Engineering, Information Security, or an equivalent combination of education and experience from which knowledge and skills may be acquired.
• Thorough knowledge of network technologies, protocols, and standards.
• Ability to automate common/essential tasks via preferred scripting language.
• Experience with source revision control tools (SVN/GIT) and configuration management tools such as Ansible.
• Ability to harness packet sniffers tools such as Wireshark for advance network troubleshooting and resolution.
• Some domestic travel may be required up to about 10%.