DCIS Network Engineering Support

Essential Qualifications/Experience:

·       Bachelor's degree from a nationally recognised university in Computer Science, Information Technology, Engineering, Telecommunications, or a related discipline, together with a minimum of two (2) years of relevant professional experience; or equivalent education, professional qualifications, and demonstrable experience in enterprise network engineering

·       Alternatively, exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that is/are of interest to NCI Agency, that is, at least 5 years extensive and progressive expertise in duties related to the function of the post

·       5+ years of progressive professional experience in network engineering roles, including the design, implementation, configuration, integration, deployment, and support of enterprise network infrastructures

·       Experience delivering services within operational or project delivery environments

·       Experience supporting production network deployments, implementation projects, and technical exercises

·       Experience preparing technical documentation, test plans, implementation procedures, and Standard Operating Procedures (SOPs)

·       Experience in configuration management practices and supporting tools

·       Design, implement, configure, and support scalable enterprise network routing infrastructures leveraging BGP, OSPF, IS-IS, and MPLS routing protocols

·       Configure and operate Cisco routing and switching platforms, including Cisco IOS-XE and Cisco NX-OS

·       Configure Layer 2 and Layer 3 network services

·       Configure and validate Virtual Routing and Forwarding (VRF), GRE tunnels, IPsec tunnels, MPLS Traffic Engineering, policy-based routing, route redistribution, route summarisation, HSRP, and other enterprise routing technologies

·       Configure data centre and switching technologies including STP, MSTP, Rapid PVST, EtherChannel, LACP, Virtual Stack, StackWise, and Cisco Nexus platforms

·       Configure Quality of Service (QoS) policies, including traffic classification, shaping, and policing

·       Configure and operate network monitoring and event management systems (e.g. Intermapper, CA Spectrum)

·       Perform console and remote deployments, IOS software upgrades, configuration backup and recovery

·       Validate routing adjacencies, implementation activities, and end-to-end network connectivity

·       Perform implementation testing, User Acceptance Testing (UAT), and deployment validation

·       Troubleshoot implementation-related technical issues using tools such as Wireshark, NetFlow, and SNMP

·       Apply network security best practices, including ACLs, VPNs, IPSec, AAA, Role-Based Access Control, and security hardening

·       Produce implementation records, technical evidence, and supporting documentation

·       Knowledge of firewall technologies and enterprise security architectures.

·       Knowledge of the ITIL IT Service Management framework

·       The assigned personnel shall have at least three (3) years of experience in the following areas:

ü  Latest virtualization technologies and modern operating systems

ü  Operation and configuration of Cisco routing and switching elements

ü  Operation and configuration of network automation or equivalent automation/orchestration systems

ü  Configuration and operation of Network Monitoring Systems (e.g., Intermapper, CA Spectrum) and Event Management Systems

ü  Support to exercises and operational activities

Desirable Qualifications/Experience:

·       Active Cisco Certified Network Professional (CCNP) Enterprise or Service Provider certification

·       Familiarity with Thales TCE 621 family IP Cryptographic Equipment or equivalent military-grade IP encryption devices

DUTIES/ROLE:

·       Advanced device configuration: Executing the end-to-end configuration of Cisco routing devices based strictly on provided configuration diagrams, ensuring accurate mapping of connectivity, ports, vlans, IP addresses, and subnets

·       Virtual routing and segmentation: Implementing virtual routing and forwarding (VRFs) to ensure strict, auditable protocol and traffic isolation across multiple security classifications

·       Routing protocol deployment: Configuring and optimizing dynamic routing protocols including IS-IS, OSPF, and BGP according to enterprise architecture standards

·       Secure Tunnel Establishment: Constructing, validating, and securing Generic Routing Encapsulation (GRE) and IPsec tunnels to facilitate secure remote transport

·       Remote hands and physical coordination: Collaborating with local support personnel to guide physical installation, verify cabling, and establish baseline physical connectivity

·       Management tool integration: Enrolling, configuring, and verifying all newly deployed devices within centralized management and monitoring tools, specifically Cisco Identity Services Engine (ISE) and CA Spectrum

·       System documentation management: Supporting the maintenance and updating of system documentation to reflect changes, configurations, and operational procedures

·       User Acceptance Testing (UAT) and Troubleshooting: Providing specialized technical support during UAT, including active fault diagnosis, troubleshooting, and resolution of routing, tunnelling, or authentication issues