By Light Professional IT Services

  • Principal Network Engineer

    Job Locations US-GA-Fort Gordon
    Job ID
    # of Openings
    Job Function
    Information Technology
    Minimum Clearance
  • Overview

    The Cyber Battle Lab is an experimentation, assessment, and IT services provider facility leveraging innovative Signal, Cyber, and EW concepts and technologies to support the warfighter and inform the requirements and acquisitions communities.


    • The Senior Principal Network Engineer will install, configure, operate and maintain routing, switching, and encryption equipment associated with CBL experimentation networks. You would also be responsible for the installation, configuration, operation and maintaining the Generic Routing Encapsulation (GRE)  tunnels, multicast implementations, Multi-protocol Label Switching (MLS), Quality of Service implementations and necessary IP address definition and routing to support the BLCSE. 
    • You would be responsible for maintaining and updating the Voice over Internet Protocol (VoIP) phone database and the Call Manager software, Intrusion Prevention/Protection Systems, Firewalls, penetration tools, and Network Monitoring and Operations Tools.  Additionally, required to schedule, monitor, and troubleshoot the secure video teleconferences (VTC).
    • The network engineer must be able to design, develop and implement extended network enclaves based upon rapidly changing experimentation requirements.
    • Verify that all network monitoring systems have been updated after any changes on the network have been made. 
    • Required to install, configure, operate and maintain the automated information systems. 
    • Ensure that all information and operating systems, collaborative services, and supporting applications are updated as needed with the latest government approved versions, and recommended information assurance patches and anti-virus releases.  All systems will be tested no less than 48 hours prior to and after any updates are applied to information and operating systems, collaborative services, and supporting applications to verify that the information system and the network it is connected to are operational.
    • Develop and maintain updated network diagrams for all enclaves.
    • Provide network support and maintenance to off-site nodes.

    Required Experience/Qualifications

    • Network/Data Engineers supporting LE on day one must have baseline certification in GSEC or Security + CE or CSA+ or GICSP or SSCP or CCNA Security (preferred) or IAT Level III Certification; and must have computing environment certification in either CCNP Security or CCNP R&S.
    • Within six months must obtain CCNP Security or CCNP R&S
    • Thorough effective verbal and written communications, the Senior Consultant must be able to clearly update senior leaders & key stakeholders on the status, progress, and challenges relating to current/planned analysis, evaluations, and deliverables during routine IPRs, VTCs, and meetings.
    • The employee must be able to plan/lead/coordinate Work Group Meetings as needed to ensure completion of all assigned project objectives/outcomes.
    • Position requires at least 5 years’ experience and/or familiarization in planning, managing, and defining requirements for current/future Army tactical communications including satellite, high capacity line-of-sight radios, single channel radios, Wi-Fi, cellular, baseband, network operations, and end-user applications/devices. This position also requires a complete working knowledge and full understanding of JCIDS requirements, PPBES, and Acquisition processes.

    Preferred Experience/Qualifications

    Network experience

    • Ability to design, configure, and deploy IP networks from scratch
    • Ability to create and decipher complex network diagrams
    • Ability to observe network activity and make changes to the network to improve / allow different types of traffic to flow
    • Ability to observe firewall logs and reconfigure to allow specific traffic to flow
    • Ability to configure and manage military IP encryption devices
    • Ability to configure and manage VOIP solutions
    • Ability to configure and manage Dynamic Multi-point Virtual Private Networks (DMVPN)
    • Ability to configure and manage virtual server and network environments
    • Understanding of radios and other transmission devices (WIN-T and commercial solutions)


    NETOPS experience

    • Solar Winds tools
    • Castlerock SNMPc
    • Thorough understanding of NOSC and WIN-T architecture
    • Domain management
    • AAA management
    • Configuration and change management



    • Strong troubleshooting skills with a variety of brands (Cisco, Juniper, Brocade, Palo Alto, VMware)
    • Wireshark
    • Packet captures
    • Netflow
    • Fluke/NetScout Network Analyzer
    • Firewall logs


    Experience configuring:

    • Cisco Routers
    • Cisco Switches
    • Cisco Firewalls
    • Cisco Unified Communications Manager (CUCM)
    • Juniper Routers
    • Brocade Switches
    • Palo Alto Firewalls
    • VMware environments
    • High Assurance IP Encryptor (HAIPE)
    • NetApp Network Storage Device

    Special Requirements/Security Clearance

    • Must have a Secret Clearance, wit TS/SCI eligibility
    • IATII -  Security + CE 
    • Within six months must obtain CCNP Security or CCNP R&S
    • Within 6 months of hire must have one of the following: OpenStack; Security Onion; Linux; or security suite training  approved by CBL IAM/COR
    • 25% or less - You may be expected to travel for this position


    Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
    Share on your newsfeed