Sr. Network Engineer/System Administrator - ISE III

The Monitoring Systems Administrator performs complex functional activities and project management for the USPS.  They will be expected to regularly exercise independent judgment, as well as high level of analytic skill, in solving complex technical problems for the USPS in the Windows and Linux based monitoring environments.  This individual serves as the focal point for problem resolution by interacting with USPS employees and (multiple) equipment and application vendors to ensure proper application installation and operation, and problem resolution. The individual will also serve as the trainer and mentor to the Monitoring Systems Administrator, junior position at various times.  This individual will be expected to work independently with a minimum of guidance or direction. This individual may be required to work long and varied schedules to support diverse and complex USPS production environments. 

Requirements

• Administer CISCO ISE
• Configure, administer, document custom policies for Network Access Controls
• High level troubleshooting of network and application issues
• Adhere to strict Information Systems security guidelines in all cases.
• Working as Network Access Controls (NAC) ISE Engineer in managing, planning, and designing a framework for authenticating and authorizing national clients via various methods: to include dot1x and profiling; and to enforce compliance across remote VPN, wireless, and wired networks.
• Manage and build Cisco ISE VMWare servers: to include certificate management, licensing, and Integration with 3rd party application servers.
• Manage Cisco ISE Guest Network environment and users accounts.
• Assist in the onboarding and introduction of new endpoints onto the network via investigative testing and probing of endpoint attributes, protocols, and behavior; to culminate in the creation and/or assignment of appropriate policy.
• Utilize Splunk to drive reporting and search for data collected from Cisco ISE.
• Perform packet captures and TCP dumps to analyze application traffic to troubleshoot issues related.
• Provide support for ISE related issues, including off-shift and weekend support functions.
• Utilize ServiceNow application to monitor troubleshoot and track all ISE related tickets.

Required Skills:

• Cisco ISE
• Security device management
• Traffic and log analysis
• Strong understanding of TCP/IP, UDP/IP, DNS, DHCP
• Knowledge of TCP, understanding network, protocol, and application traffic flows
• Ability to troubleshoot basic network issues including IPv6.
• Proven ability to multi-task
• Knowledge of best practices and IT operations in an always-up, always-available service
• Manages time effectively.
• Creative thinking skills
• Detail-oriented personality.
• Ability to maintain effective communication and working relationships with co-workers.

·       Works on high-visibility, or mission critical aspects of a given program, and performs all functional duties independently.

·       Oversees the efforts of direct reporting resources and/or be responsible for the efforts of all staff assigned to a specific job.

Desired Skills:

• Firewalls
• Proxy
• Switches/routers (Juniper Mist/Fortinet/Aruba)
• Cyber Security Skills
• Network and Log Analytics
• Proficient with application layer protocols – HTTP, SSH, SSL, etc.

Education:

·       A minimum of eight (8) years’ relevant experience.

·       A degree from an accredited College/University in the applicable field of services is preferred. four additional years of relevant experience in lieu of a college degree is required. If the individual’s degree is not in the applicable field, then four additional years of related experience is required.

Additional Provisions:

·       Pass both a client mandated clearance process to include drug screening, criminal history check and credit check.

·       Once candidate’s resume is approved and interview passed, the agency is responsible for providing drug screening.  Failure to submit the drug screening results will delay the security clearance process.

·       If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance. 

·       All candidates must be a US Citizen or have permanent residence status (Green Card).

·       Candidate must have lived in the United States for the past 5 years.

·       Cannot have more than 6 months’ travel outside the United States within the last five years.  Military Service excluded.  (Exception does not include military family members.)

·       All overtime must be pre-approved in writing by the client manager or his/her designated representative.

·       Agency will not be reimbursed for overtime charges without previous written authorization.  Authorized overtime will be reimbursed at straight time.

·       The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women.

Place and Period of Performance

·       Hours of support:

• The standard work week for contract staff will be 5 days a week and 8 hours per day preferable Monday through Friday.
• Contract staff may be required to travel to support business efforts.
• Location: Raleigh, NC

Benefits

SES provides a competitive salary and the following benefits:

• Medical
• Dental
• Vision
• AD&D
• STD
• LTD
• Company paid Life Insurance
• 401k with employer contribution
• Paid Time Off