Openings

JOB SUMMARY:  We are looking for a highly technical hands-on Sr. Network Solutions Engineer to support the National Gallery of Art's (NGA) enterprise network infrastructure operations in a multi-cloud compute environment. In this position you will secure and maintain reliability of the operation of all NGA networks both on-premises and in the cloud.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Manage the wired and wireless network infrastructure, including routers, switches, firewalls, and all supporting network services such as Remote Access and DNS/DHCP. This will include software and/or hardware upgrades during after-hours maintenance windows to maintain functionality, security, and performance of the network.
• Provide oversight and management of network operations infrastructure within the hybrid on-premises and cloud environment, including but not limited to, routing/switching, Wi-Fi, DNS/DHCP, firewalls, load balancing, VPN/remote access, and secured communications.
• Routinely monitor the health, performance, and cybersecurity posture of the agency networks to ensure efficient, effective, reliable, and secure operation.
• Respond to IT service desk tickets escalated from the agency Help Desk related to incidents and changes.
• Work closely with the team and stakeholders to identify requirements, solve existing problems, and incorporate effective technologies in both ongoing and planned network infrastructure projects.
• Work with system owners and project managers to develop and implement complex solutions.  Share concepts and techniques as well as foster and encourage sharing of knowledge.
• Support all stages of the system development life cycle (analyze, design, develop, test, deploy and sustain) for agency IT projects. 
• Racking/Stacking of hardware

• Strong Switching experience, including VLANs, access/trunk ports, spanning-tree, and LACP.
• Strong IP Routing experience, including OSPF/BGP, route tables, and VRF instances.
• Hands on management of Enterprise firewalls, including security/NAT policies and IPsec VPN.
• Working knowledge and experience with Cisco, Juniper, and/or Fortinet opera systems.
• Experience with cybersecurity compliance for network devices and appliances, including patching, upgrades, certificate updates, and hardening/baselining.
• Hands on troubleshooting experience with physical cabling, including multimode/single mode fiber cabling, copper cabling (RJ45, CAT6/6A), and Power over Ethernet (PoE).
• Working knowledge of general network troubleshooting, including using cable test tools, Wireshark packet captures, pings, traceroutes, etc. to diagnose root cause.
• Experience working independently and in group settings, within an enterprise environment, to ensure all changes are well communicated and documented.
• Requires 3+ years of experience with:
• WiFi – controller-based enterprise system, WLANs, WPA2-PSK, and 802.1x.
• Managing DNS records (A, CNAME, PTR), DHCP ranges, and IP address management.
• Managing and updating SSL certificates on network devices.
• Configuring SNMP Monitoring.
• Operating UPS and PDU power management.
• MUST be willing to work 100% on-site.

 Preferred experience with the following:

• Citrix Remote Access – NetScaler, Citrix Virtual Apps and Desktops
• Authentication - TACACS+, RADIUS, RSA, AD Groups, ADFS, SAML
• Zscaler Zero Trust Network Access
• Linux and Windows host firewalls
• Cloud Networking – AWS and/or Azure

Level of Security Clearance: Public Trust Secret [minimum]