Network Engineer (Open to Reston OR Billerica OR Brentwood)

IDEMIA is the global leader in identity and security. Our mission is to create a safe and simple future where identity verification is indisputable, and only you can assert your identity. We are a distributed company leveraging the latest technologies to deliver world-class products in the private and public sectors of finance, telecom, identity, security, retail, sports entertainment, commercial, government, and IoT. We use a variety of technologies and approaches to deliver quality product and services to government agencies and technology companies. IDEMIA is a made up of a group of 14,000 diverse people from different nationalities, speaking over 20 different languages. Together, our solutions impact the everyday lives of citizens and nations. In this ever-changing world, protecting your identity is paramount. Join the team that is ensuring one person- one identity.

This position is open to the following locations (Open to Reston OR Billerica OR Brentwood)

• Netowork engineering and network security engineering and support
• Very strong experience with Cisco ASA and Cisco Firepower, Cisco router / switches and Cisco Nexus platforms
• Configure, install and troubleshoot network technologies, such as routers, switches, and firewalls, including: configuring and troubleshooting routing (BGP), MPLS and QOS
• Strong Cisco router configuration and management, including monitoring and configuration tools; data circuit/WAN support; Ethernet topologies and data/voice communications.
• Very strong Cisco ASA/Firepower configuration and management.
• Experience designing and implementing Cisco ISE in an enterprise environment.
• Establish standards for documenting information systems and changes to them and for testing new systems and updates for current programs before they are put into production
• Collaborates with IT team to implement technical controls and projects to ensure security issues are addressed.
• Efficiently manage oneself, resources, and timelines to deliver solutions that solve business needs and requirements
• Ensure the systems environment is reliable, secure and meets or exceeds regulatory agency compliance requirements
• Collaborate with management and department leaders to assess near and long-term network capacity needs.
• Able to carry out job functions independently and responsibly
• Strong interpersonal, written, oral communication skills
• Available for 24/7 on-call support.

• BA degree in computer science, MIS or related field
• 8+ years preferred IT experience, ntwork engineering and network security engineering / support
• Strong Cisco ASA and Cisco Firepower experience
• Strong experience with Cisco routers, switches and Cisco Nexus platforms

• In-depth knowledge in the analysis, implementation troubleshooting and documentation of Cisco ASA’s, can explain, what is a crypto ACL, IPsec, DH, IKEv1, IKEv2, NAT, PAT, encryption, and integrity of a crypto map and needs to fully understand and can explain the differences between phase 1 and phase 2 of a crypto SA

• Experience installing, troubleshooting, and configuring in Cisco switches, routers  STP, VTP, HSRP, VRRP,VLSM, DHCP. Has configured and can explain the first thing required to configure a VPC Peer-Link, know the difference and can explain the difference between an IP Default-gateway and a static route

• In-depth experience, knowledge of and hands on skills with BGP, EIGRP, OSPF, needs to be able to describe what is a BGP AS and the basic configuration needed to establish a BGP neighbor, what is the TCP/IP port used for BGP.

• Strong familiarity with Feasability Condition in EIGRP for a route to be chosen as a feasible successor

• Needs to know what is the backbone area in OSPF, along with what are the 5 items that need to match to establish an OSPF neighbor adjacency 

• Proven experience with network capacity planning, network security principles, and general network management best practice
• Strongly preferred experience: SolarWinds, Cisco ISE, RADIUS, TACACS, Visio, AWS and Azure
• When interviewed, must be available for a video call with a PC available to remote in and perform hands-on configuration and troubleshooting