By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. 

We are seeking a Network Engineer to provide network operations and engineering sustainment support to a mission critical IP messaging and communications transport network. A successful candidate will develop an understanding of the services offered to external organizations, provide lifecycle systems engineering support to development and operations on the program, and use a combination of technical and functional expertise to recommend solutions to satisfy customer requirements. 

• Network integration, testing, security engineering, and implementation configuration support.
• Collaborate with network architects to define and/or continuously improve STIG compliant configuration baselines, versioning, and compliance tracking.
• Test and validate automation and best practice insertion opportunities.
• Assist with the development of SOPs/TTPs.
• Support Continuous Service Improvements (CSI).
• Support system performance tuning and enhancements.
• Create and maintain Engineering Implementation Plans (EIP).
• Support tier escalation of incident management support tasks.
• Active participation in Root Cause Analysis (RCA) for Problem Management activities.
• Participate in engineering meetings to bridge the gap between operations and engineering providing operational readiness for new solutions projected to be deployed into production.
• Perform technical maintenance involving firewalls, VPNs, IPS, and load balancers.
• Provide knowledge of network engineering and operations, large scale enterprise network solution implementation and transition to Network Operations, as well as test and evaluation activities. Perform technical maintenance involving network devices routers, switches, security solutions, and WANX.

• BS degree and 4 to 8 years of prior relevant experience or a Masters with 2 to 6 years of prior relevant experience. (Additional years of related work experience may be substituted for a degree at the Hiring Manager's discretion).
• Effective written and oral communication and problem-solving skills
• Security+ Certification or other DOD 8570 IAT Level II Certification within a certain timeframe after starting if not starting with one when hired.
• Knowledge of defense-in-depth principles, Network and Security architecture, network topology, IT device integrity, and common security elements.
• 4+ years’ experience engineering and troubleshooting networks, including extensive routing and switching experience such as one or more of the following: MPLS, VPNs, routing protocols i.e. BGP, OSPF, IS-IS, switching protocols i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP, Multicast protocols and emerging network technologies.
• An understanding and in-depth knowledge of IP network/subnet addressing.
• Experienced and adept at developing and maintaining technical documents, analyses, and reports.
• Experience developing and presenting technical information to team lead.
• Hands-on experience deploying, configuring and troubleshooting Cisco enterprise network routing, switching and firewall/security devices.
•  

• Extensive knowledge of network engineering and operations, integration, test and evaluation activities, as well as implementation and transition to Network Operations processes and concepts
• Cisco CCNP Route/Switch and/or CCNP Security
• Experience and with and practical understanding of enterprise WAN principles.
• Experience with change, configuration and performance management NetOps concepts.
• IAT Level III Certification (i.e. CISSP or equivalent). 

• Active DoD clearance at the Top-Secret/SCI level
• Ability to travel up to 10%+ OCONUS travel.