The Team

The Global Network Engineering (GNE) team is responsible for the architecture, engineering and deployment of the Fidelity Core Network across the Global WAN (U.S. regional campuses, colo’s, international backbone, Data Center Interconnects, optical ring’s) and LAN (data center network fabric, regional campus wired/wireless).

The Principal Network Engineer on the GNE team leads all aspects of the design, engineering, and implementation of Fidelity Investments’ switch and routed global network infrastructure with a focus on stability, automation, and innovation.

LAN/WLAN/WAN environments traversing multiple platforms, supporting Enterprise Infrastructure teams on projects including engineering and implementing new and upgrading existing network hardware, code certification as well as keeping the network secure through tactical organizational change. Additional duties include third level operational support and participation in on-call rotation.

Education and Experience

• Bachelor’s degree highly preferred in Computer Science or Network Engineering fields
• 8-12+ years of related experience
• Cisco CCNA/CCNP/CCIE or other network engineer certifications preferred
• Network security and automation experience preferred.

Primary Responsibilities

• Network Engineering and Troubleshooting skills
• Routed/Routing Protocols: BGP, OSPF, MPLS, VRF, VPNs
• Switched Protocols: PVST, RPVST, VxLAN
• Support Routed/Routing Protocols: BGP, OSPF, MPLS, VRF, VPNs
• WLAN/LAN/WAN engineering and implementation.
• Adept with 802.11 wireless technologies in an enterprise implementation
• We implement and support a secure enterprise-wide wireless infrastructure.
• We implement code upgrade/hot fixes from vendors.
• Pre/Post change verification/validation with customer.
• We support the environment in an on-call rotation.

Skills and Knowledge

• Detailed knowledge of 802.11 wireless technology standards – 802.11b/a/n/ac/ax.
• Solid experience managing wireless controllers.
• Experience with TCP/IP, including knowledge of common-service applications
• Experience engineering and supporting large scale enterprise wireless infrastructure.
• Expert knowledge configuring and supporting HPE/Aruba, Cisco routers and switches.
• Experience with presenting to senior leadership.
• Ability to work in a virtual team environment.
• Development/Automation, scripting experience using Python or Ansible a plus.
• Experience with 802.1x configuration and troubleshooting.
• Experience with supporting collocated networks, Cloud Service Providers, AWS, Azure Google Cloud Platform, etc. is a plus

Job Responsibilities: Duties include, but not limited to:

• Perform Assessment and Authorization (A&A) responsibilities
• Maintain system cybersecurity via Enterprise Mission Assurance Support Service (eMASS)
• Collect and review RMF artifacts and maintain eMASS records
• Conduct system compliance self-assessments
• Participate in product teams, meetings, change control boards, and working groups to ensure the continued alignment of cybersecurity requirements in the technical baselines
• Perform security impact analysis on system changes and prepare letters of assurance, security impact letters, and risk assessment letters
• Review and provide recommended updates to program cybersecurity policies and plans
• Provide written evaluations portraying system progress on RMF compliance
• Conduct and/or report annual FISMA requirements and maintain records
• Conduct annual control validations for NC3 systems
• Create and maintain Authority-to-Connect packages in eMASS
• Perform cybersecurity vulnerability management
• Receive and review ACAS and SCC reports for each system and characterize risk
• Review test plans, test results, and observe system testing for security control implementation
• Handle a variety of cybersecurity related special projects

MINIMUM QUALIFICATIONS:

• DoDI 8570.01-Manual IAM 1 or IAT Level-II certification
• Bachelor’s degree in a technical field; or equivalent years of experience
• 3-8 years of experience in DoD cybersecurity
• Secret clearance, eligible for Top Secret
• RMF and A&A experience
• Detail oriented, organized, and good customer service skills
• Strong initiative, problem solver, and ability to work with minimum supervision

PREFERRED QUALIFICATIONS:

• CISSP or CAP certification
• Top Secret clearance, eligible for SCI
• Prior experience supporting SMC or USSF
• Prior experience as ISSO, ISSE, ISSM, or Security Control Assessor
• eMASS experience

Additional Information:

• Position is located at Peterson Air Force Base in Colorado Springs, CO.
• Travel 0-5%.

Duties will also include providing multi-disciplinary intelligence, surveillance, and reconnaissance (ISR) analysis; developing tactics, techniques, and procedures (TTPs); developing and teaching collaborative profiling and targeting techniques; performing network, trend, and pattern-of-life analysis; conducting multi-disciplinary ISR PED activities; behavioral/linguistic analysis; and digital network intelligence.

Required Skills:

• Expertise in the area of software and hardware associated with localized WiFi networks within the maritime environment and aboard commercial and non-commercial maritime vessels
• Computer networking and IP flow analysis with a background in the collection, application, and integration of all-source intelligence, including, but not be limited to: Signals Intelligence (SIGINT), Open Source Intelligence (OSINT), All-Source Intelligence, Human Intelligence (HUMINT), and Geospatial Intelligence (GEOINT)
• Commercial Data (CD) Processing, Exploitation, and Dissemination (PED) in order to enable JIATFS TNAC to detect and monitor illicit trafficking in the air and maritime domains and facilitate international and interagency interdiction and apprehension
• Direct support to law enforcement in case development, investigations and targeting and interdiction of illicit trafficking
• Direct support to Department of Defense (“DoD”) and Intelligence community (“IC”) missions and organization including but not limited to, internet exploitation and cyber network defense
• Use various analytical techniques, web-enabled capabilities, databases and applications to provide multi-ISR discipline products and PED support within prescribed
• Produces reports of individual findings from the analysis of all investigative material on an ongoing basis, write intelligence reports, create graphics and working
• Supports quality control review over software output and reconcile data with original documents to ensure accuracy
• Support team in accessing, categorizing, evaluating, integrating, and analyzing information from multiple sources in support of Client mission objectives and
• Provide written results within formal and informal briefings to Client as required by the Contracting Officer’s Representative
• Supports recommendations to the Government on the relevancy of investigative information as related to priority intelligence requirements and organize and conduct detailed assessments of information gathered
• Adhere to prescribed multi-discipline JSR tactics, techniques & procedures (TTPs)

Required Experience

• Ten to fifteen years of specialized IP Flow experience involving collection, evaluation, analysis, production and dissemination of investigative intelligence
• Ten to fifteen years of specialized training in software and hardware associated with localized WiFi networks within the maritime environment and aboard commercial and non-commercial maritime vessels
• Software/tool development in support of intelligence/data analysis
• Working knowledge of applications and technology for the purposes of data mining, research, and network analysis
• Bachelor’s degree or 5 years additional experience in lieu of degree
• Communications profiling based on behavioral/activity pattern analysis
• Exploitation of data from ISR sensors/platforms for the purpose of intelligence reporting
• Experience supporting the ISR enterprise
• Verification and validation of tool suites and the automated capability
• Level of Education High School/Equivalent
• Travel Requirements Up to 25%
• Clearance Level Required 05. Top Secret, 06. SCI
• US Citizenship Required Yes