Senior Systems Engineer (TLA Network Engineer)

Complete Professional Services (CPS) is a forward thinking women owned small business with extensive capabilities in systems development, integration, maintenance and support in the Federal Health Care and National Security Information Technology (IT) domains.

Complete Professional Services (CPS) is searching for a TLA Systems Engineer – Senior, you will provide support to the U.S. Army Network Enterprise Technology Command (NETCOM) to continue the effort in the engineering, planning, integration, and management support of the Top Level Architecture (TLA) and Unified Capabilities (UC) efforts. These efforts include: the voice, data, and security infrastructure for Installation Campus Area Network (ICAN) and the UC and network modernization efforts include but are not limited to: TLA, Regional TLA (R-TLA), Demilitarized Zone (DMZ), Installation Processing Node (IPN), Everything over Internet Protocol (EoIP), Multi-Protocol Label Switching (MPLS), Video Teleconferencing (VTC), Voice over IP (VoIP) and Voice over Secure IP (VoSIP), Virtual Private Network (VPN), Network Intrusion Detection/Prevention Systems (NIPS) and Next Generation Firewall (NGF). These requirements support Installation As A Docking Station (IAADS) efforts and pertain to Army Enterprise, including Non-secure Internet Protocol Router Network (NIPRNET), SECRET Internet Protocol Router Network (SIPRNET), and Deployed Forces (DF) environments. Any and all of the capabilities that fall under UC and network modernization as a whole will posture for and be compatible with future DOD network information and operation constructs.  In assuming this position, you will be a critical contributor to meeting CPS's mission: To deliver innovative, cost-effective solutions and services that enable our customers to rapidly adapt to dynamic environments.

Highlights of Responsibilities:

• Provide engineering support to Capability Managers for current and planned implementations. 
• Analyze engineering data to support network performance, security, and capacity planning in accordance with Army regulations, directives and policies. 
• Provide engineering support currently in the LWN such as proxies, load balancers, encryption, remote access servers (terminal servers/Citrix servers), Remote client access, Network Admission Control (NAC), VPNs, SSL accelerators, WAN optimizers, DHCP controllers, performance analyzers, EoIP, VoIP, Wireless, and VTC. 
• Analyze engineering data to support network performance, security, and capacity planning in accordance with Army regulations, directives, and policies. 
• Evaluate and provide recommendations for current and emerging technologies and methodologies to ensure Army Enterprise standards are maintained.   
• Develop change control, configuration management, installation, and implementation planning documentation.  
• Perform engineering trend analysis; document and report potential flaws within the technology.
• Develop engineering white papers, best practices, and other reference materials that are relevant to the technology.  
• Perform engineering in a Government lab to support the testing, evaluation, installation, and integration of software and hardware into the enterprise environment.
• Develop system designs and specifications, and test and evaluate systems capability and acceptance in a Government lab.  
• Work with Government capability managers and provide support documentation for system fieldings within the overall architecture of the Army Enterprise (e.g., RMF, DIACAP, requirements matrices, etc.).
• Develop and publish technical control bulletins and documentation that support enterprise network implementation of TLA, R-TLA, DMZ and overarching Unified Capabilities requirements in accordance with NETCOM, G-5 guidance and approval.

Requirements: 
• Current Active Secret Security Clearance and or the ability to obtain one. 
• Bachelor’s Degree in an IT related field or 8 years of direct relevant technical experience may be substituted for education.
• Seven years experience in IP data networking.
• IT Level I requiring a Single Source Background Investigation (SSBI) in accordance with AR 25-2.   
• IAT II certified as specified in DOD 8570.01-M and BBP 05-PR-M-0002 (Security+ CE, GSEC, SCNP SSCP or GSLC IA Certifications). 
• Ability to obtain the Cisco Certified Networking Professional (CCNP) or the Juniper equivalent or higher level network Computing Environment (CE) certification within six months of start date.
• Working knowledge of operating systems (Linux, Microsoft, Cisco Internet Operating system (IOS), Juniper Operating System (JUNOS)), screen OS, data packet routing, switching,  proxy services, and engineering for IP data networks.

Preferred Education and Experience: 

• Experience in all aspects of the Information Technology (IT) DMZ security, perimeter network security and security-in-depth applications for firewalls (Juniper, Cisco and NGF), Virtual Private Networks (VPN) (Juniper and/or Cisco and/or NGF), MPLS, proxy servers (BlueCoat), intrusion detection/prevention (IPS), Internet Security Systems (ISS) and/or McAfee and/or NGF detection/prevention systems, routers (Cisco and/or Juniper and/or NGF), switches (Cisco and/or Juniper and/or NGF), voice and video from a circuit switched Time Division Multiplex (TDM) infrastructure to an Everything over IP (EoIP) infrastructure, and network segmentation and containment applications using routing, virtual local area network (VLAN), and other related methods. 
• Working knowledge of VPN and IPSEC.