Network Architect SME

About the role

Trace Systems is looking for a cleared Network Architect SME to provide expert-level technical support for the design, configuration, implementation, operational management and troubleshooting of an enterprise network, based on site in Stuttgart, Germany. The role covers BlackCore networks, classified solutions and data center environments, and provides network engineering support for core infrastructure across multiple continents within the AFRICOM AOR.

Key responsibilities

• Design, implement and maintain highly reliable and scalable network systems.
• Configure and maintain complex enterprise routing and switching environments (DMVPN, MPLS Segment-Routing).
• Manage and troubleshoot data center fabrics with Cisco ACI and Nexus switches; deploy and manage Palo Alto and Cisco Firepower firewalls.
• Administer Cisco ISE and provision KG encryptors (e.g. TACLANE) for classified traffic.
• Build automation frameworks with Ansible, Python and REST APIs, and create a roadmap for Infrastructure as Code.
• Maintain F5 load balancers and Infoblox, and gather metrics for performance tuning and after-action reporting.
• Support LAN/WAN installations, troubleshooting and break/fix actions, and turn client requirements into documented engineering specifications.
• Develop new initiatives, customer relationships and technology engagements, and deliver design, process, policy and procedure documentation.

Required profile

• Active, in-scope US Government Secret clearance with TS/SCI eligibility; US citizenship required.
• 15 years of experience each in routing and switching, network security, data center technologies and global enterprise networks.
• IAT Level II certification (Security+, etc.) and ability to meet TESA requirements to deploy OCONUS.
• Bachelor's degree plus 3 years of specialized experience, or an associate's degree plus 7 years, or a major certification plus 7 years, or 11 years of specialized experience.

Required skills

• Routing and switching: MPLS, L3VPN, L2VPN, MP-BGP, OSPF, IS-IS
• Cisco ACI, Nexus 5K/7K/9K, Cisco ASA/Firepower/FTD, Cisco ISE
• Palo Alto firewalls, F5 load balancers, Infoblox, VMware ESXi and NSX
• Network automation with Ansible and Python
• Desired: IAT-III (CISSP, CASP, GCIH) and ITILv4 Foundations certifications