Sr. Network Engineer

Seize your opportunity to make a personal impact as a Sr. Load Balancer Engineer supporting our HHS HRSA customer. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

As a hands-on Sr. Load Balancer Engineer, you will architect, engineer, test, and implement a global Cloud SASE Load Balancing solution using Akamai SASE load balancing services.

*Candidates must be able to travel to customer location Maryland to obtain badging prior to starting and will be expected to work onsite in the Rockville, MD area a few times a month as needed*

Responsibilities:

1. You will help the customer migrate publicly accessible applications currently hosted on-premise using Citrix NetScalers to the new Cloud SASE Load Balancing solution with OKTA Single-Sign-On (SSO).
2. Will work with a cross-functional team of engineers and subject matter experts integrating firewalls, NAT, Azure Load Balancers, TIC 3.0 cloud infrastructure with the new Cloud SASE Load Balancing solution.
3. Help the customer achieve their goal of eliminating on-premise Citrix NetScalers.
4. Perform assessment and planning activities for migrating NetScaler VIPs (IPv4 and IPv6) to a SASE traffic management solution for public-facing applications.
5. Develop, document, and present a comprehensive migration strategy, including timelines, resources, and risk management plans.
6. Perform limited Pilot of the entire solution using a test application to demonstrate the changes required and build out the technical implementation plan.
7. Develop requirements documents to address the specific migration plan and to-be architecture and get approval from the customer.
8. Ensure routing of traffic between the Cloud SASE load balancing solution and the backend services take the proper path depending on TIC 2.0 or TIC 3.0 compliance.
9. Perform migration activities for migrating NetScaler VIPs to the Cloud SASE load balancing solution for public-facing applications.
10. Provide Cloud SASE Load Balancer architecture diagram based on the architecture developed.
11. Provide Cloud SASE Load Balancer network flow diagram illustrating end-to-end communication covering all use cases for the application based upon user type.
12. Ensure Cloud SASE Load Balancer solution deployed meets NIST 800-53 requirements.
13. Has a strong understanding of SSL, DNS, Firewalls, VPN, Content Delivery Network (CDN), routing, global LB traffic management, intrusion detection and IPv6.
14. Work with the security team to update GSS System Security Plan (NIST 800-53) for all controls that are customer configurable for Cloud SASE Load Balancer.
15. Work with the team, customers, and SMEs to develop required logging requirements (splunk, solarwinds, uptime, etc.) for the Cloud SASE Load Balancer solution.
16. Help build a customer automated chargeback model and configure the Cloud SASE Load Balancer to collect metrics to use for chargebacks.
17. Provide estimated per-customer costs based on current network traffic/metrics/consumption and report estimated post-migration costs.
18. Coordinate with stakeholders to ensure all activities associated with the migration are properly communicated, timeframes are established, and changes are documented.
19. Develop and adhere to standard operating procedures (SOP) for production use.
20. Furnish any software, licenses or cloud subscriptions required for the project.
21. Integrate SASE Portal authentication with customer IDP, OKTA, providing MFA.
22. Mentor and support a team of engineers to provision/configure Cloud SASE Load Balancer solution based upon customer requests in accordance to vendor best practices.
23. Lead and provide technical support in Change Management processes that directly impact the production environment.
24. Provide training to the government, and their successors, on details of the migration process, administration, maintenance, support and operational use of the solution.
25. Work with Program and Project Management throughout the contract period.
26. Participate in special projects, as needed.
27. Resolve technical O&M problems that occur and provide on-call support for non-business hours.
28. Provide Weekly and on-demand Status Reports on work performed.

Required Skills:

1. Bachelor’s degree in a related STEM field and 10+ years of experience in Networking.
2. Demonstrated proficiency with Citrix NetScalers and Akamai SASE Load Balancers.
3. 6+ years of experience in large-scale enterprise organization.
4. Must be able to obtain a Public Trust and successfully pass a thorough government background screening process (forms/fingerprinting).
5. Ability to meet with the customer onsite a few times a month in the Rockville, MD area.

Desired Skills:

1. Experience with Word, Excel, PowerPoint, Visio, SharePoint, Confluence, ServiceNow, Trello, JIRA, and MS Teams.
2. SCRUM and Kanban Agile Methodologies.
3. Experience with any HHS agencies or entities.
4. Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.
5. Demonstrated experience performing complex technical tasks with minimal direction.
6. Demonstrated experience in translating an understanding of systems and applications into test plans and perform hands-on testing.
7. Possesses experience with communicating and presenting to leadership and decision-makers.
8. Possess a broad knowledge of load balancing best practices, policies, and guidance.