Sr. Network Systems Engineer

**Salary range** - $180,000 to $210,000 - **Location**: - Doha Qatar, Signal Corps campus - On-Site - **Provided**: - Housing, vehicle, $165/day for "Meals and Incidental Expenses" and 20% extra OCONUS pay **SUMMARY**: DAWSON has an opportunity for a Senior Network Systems Engineer in Qatar. The Sr. Network Systems Engineer will perform various network engineering and security tasks involving LAN/CAN/WAN physical and virtual network, implementation, testing and evaluation, and will work with the foreign military client to ensure successful operations and maintenance. - This position also performs engineering, implementation and support activities for the system firewalls, and Voice over IP (VoIP) capability. - The network engineer will work alongside the project Systems Engineer to integrate with Windows capabilities such as Active Directory, DNS, PKI, and work with our Virtualization Engineer to assure successful implementation, operations, and maintenance of the Hyper-Converged Infrastructure (HCI) systems, VMWare, thin clients, and VDI. - This position is integral to engineering and deploying a secure computing environment for a foreign ally customer that introduces new capabilities and incorporates existing capabilities across multiple enclaves. This challenging large-scale opportunity supports the foreign military operations in a small to medium size Enterprise. The Sr. Network Engineer will be responsible for integrating information assurance disciplines into the network and will serve as a mentor to the foreign military’s network team. **DUTIES AND RESPONSIBILITIES**: - Experience in Network Engineering to include network requirements derivation and analysis, network design, network visibility and analytics, network implementation, and network evaluation - Identifies Information Protection needs and designs and maintains Network Security Architecture. - Experience in evaluating proposed network architecture changes assuring information security principles - Experience in identifying, researching, and mitigating against security weaknesses related to various network hardware and software - Develops and maintains network security plans for employing enterprise-wide security architecture - Performs network security analysis, network auditing, network monitoring, and network security testing - Experience with network technologies and components such as NGFW, NIPS/NIDS, routers, call managers, and Active Directory integration. **REQUIREMENTS AND QUALIFICATIONS**: - Required Clearance: Active DoD Secret or above - Bachelor of Science degree or higher from an accredited university in Computer Science, Information Systems, Information Technology, or related field - Minimum of ten (10) years experience as a Sr. Network Engineer - JNCIP-ENT, JCNIP-SEC, or equivalent certification - Ability to work independently or on a global team in a dynamic, fast-paced environment - Advance knowledge of Federal, Intelligence Community and DoD Information Security regulations, publications, and policies - Advanced knowledge of firewalls, security designs, and maintenance/expansion of secure network environment - Experience in Juniper switches & firewalls and Dell data center switching technologies. - Advanced investigative, analytical, and problem-solving skills - Applied knowledge of troubleshooting tools (such as WireShark, SolarWinds, etc) - Advanced knowledge of network aggregation and filtering tools (such as Network Packet Broker and TAPs) - Knowledge of vulnerability scanning tools (such as DISA’s Security Content Automation Protocol (SCAP), Tenable Security Center & Nessus). - Assists in assessment and maintenance of system security vulnerabilities and reporting. - Ability to work well within a small team environment - Ability to work with foreign nationals - Additional Preferred Technical Competencies - Software defined networking (NSX-T) - NIDS / NIPS analysis - PKI - Active Directory, DNS, DHCP, and other Windows Server - Virtualization (VMware vSphere) and Dell Hyper-Converged Infrastructure (HCI) - Security Control Testing (NIST 800-53/CNSS1253) - Vulnerability Management - Backup and recovery procedures for the server, storage, networking, and virtualization infrastructure - Business continuity activities and exercises - Security Status Reporting - Risk Management Framework - Remediation Actions (Plan of Actions and Milestones (POA&M) - Malware protection, prevention, and remediation - Access Management - Network and client / server technologies and standards - Security Incident Management - Remote access solutions and technologies - Voice over IP technologies and architectures - Experience working with technical network administrators for hardening and remediation - Experience executing vulnerability assessments with commercially available tools - Experience with continuous monitoring toolsets - Experience and exposure with Security Operations Center (SOC) tool sets (e.g. SIEM, EDR, packet capture, etc