Network Analyst

Program Overview

About The Role

The Network Management operation focuses on the operation of the IP networks that provide data transport for the DoDIN-A and local area network (LAN) internal support. The GCC controls and maintains operational responsibilities within the boundary between installation LAN and Wide Area Networks (WAN). Provides network support services to include Enterprise network operation, DNS, web filtering and proxy servers, Virtual Private Network (VPN), Installation Processing Node (IPN), Theater IP management, network management, monitoring, access control, and firewalls. All network-supported device implementation is either virtual, software defined, or physical based on system owner deployment.
• Network Services. The GCC defends the DoDIN-A by secure operation of the Enterprise network infrastructure. Performs the following support functions to remotely operate, monitor, sustain, and secure the Enterprise network within GCC responsibility boundaries:
• Respond to network changes, network failures, or modified network diagrams by utilizing a variety of network-related technologies: Multiprotocol Label Switching (MPLS), Virtual Routing and Forwarding (VRF), Border Gateway Protocol (BGP), VPN, device redundancy protocols, other exterior or interior gateway protocols, and Quality of Service (QoS) within an IP (hereafter taken to include versions 4 and/or 6) network that utilize various methods of encryption and transport security.
• Operate, monitor, sustain, and secure routers, switches, fabric interconnects, firewalls, Out-Of-Band (OOB) management routers, VPN, and access control servers.
• Implement, maintain, and document Access Control Lists (ACL) in the GCC AOR. Modify all GCC managed network devices on the ACL with no disruption in service. Create, add, delete, audit, and update Deny All/Permit by Exception (DAPE) security policies.
• Maintain accurate and complete Ports, Protocols, and Services (PPS) along with Application Layer Filtering records for GCC-managed sites as required. Review submitted RFCs and other change configurations for accuracy, feasibility, and implementation concerns within the Enterprise network architecture.
• Create, maintain, and sustain accurate and standardized network site diagrams that include all GCC-managed devices, active network interfaces, IP addresses, subnet masks, attached circuits with purchased bandwidth rates, Command Communications Service Designators (CCSDs), and routing information.

Qualifications

Basic Qualifications:

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD
• Certifications: DCWF Code 441 Intermediate: Certified Ethical Hacker (CEH) or CompTIA Cloud+ or CompTIA Security+ or CyberSec First Responder (CFR) or GIAC Global Industrial Cyber Security Professional (GICSP) or Systems Security Certified Practitioner (SSCP)
• U.S. Citizenship required
• Possess and maintain a Secret security clearance
• Excellent problem-solving and customer service skills.
• Must be able to perform shift work

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.