|   | 
		
			 
				
			 
			
																												
				
				|   |  						
				
				
					
					| Jun 9, 2020 | 
				 	
				
					| Stafford, VA | 
					  | 
				 
				  |  				
				 
				  |  
				  |  
				
					
						Design & Test ENG
  IPSec Removal Project – Engineering Position Descriptions
  Job Description
  •This effort requires the removal of the IPSec VPNs and associated retirement of  the Outer Switches.  This will require Phase 1 of the MPLS project to be completed  at each site.  Execution of this project affects a number of connected systems which must be  included in the scope of this effort.  
  •There is a two-phased approach to develop the network traffic encryption model  that meets government TRANSEC requirements across NMCI and  execution plan  that incorporates all Tier 1 – Tier 4 sites and connected systems and  implementation.          - Develop a solution to migrate encryption capability from the IPSEC VPN  device to DISA MPLS VPN.
  • Documentation Requirements          - Submit project documentation, including Development “DEV” documents,  test plans, and test reports, to PMW 205 for Government concurrence and  approval where applicable.
  • Conduct engineering activities in support of the following          - System Design          - Test Plan           - Test Report           - Implementation Plan 
  • Testing           - align to work already completed for affected system(s), test and certify  solutions in a lab environment CONOPS support
  • Assist NETOPS in the update of the Concept of Operations (CONOPS) document.          - The CONOPS will document the operational roles and responsibilities and  reporting process workflows of the updated systems. Document its role in the  operation of the affected system(s) (eg uWAN-uTB)
 
  Position Requirements – Engineer / Architect
  •Experience with DISA NETWORK/IA STIGS  •Familiarity with DISA JIE STIGS  •Familiarity with DODAF SE methodology and documentation requirements  •Experience with Test Plan/Procedure documentation  •Experience supporting DIACAP processes and ISSE •Some resources should be near San Diego (or have access to San Diego) for PCL  testing during all engineering phases  • Ability to obtain applicable clearances/access (anticipated to be no higher than  Secret) • Understanding of JIE constructs – Base Node •Understanding of the NMCI unclassified WAN/unclassified Transport Boundary  System design and System interfaces •Experience with WAN edge design/engineering (from very large to small site  designs) • Experience with logical/virtual network segmentation techniques • Expertise with routing protocols (OSPF/BGP) and IPv4/IPv6 • Strong Experience with dynamic IPSEC (e.g., GETVPN, FLEXVPN, DMVPN) and  technology dependencies (e.g., PKI, IKE, etcetera) • Experience with dynamic tunneling (e.g., Multi-point GRE) • Strong Experience with Operations-oriented engineering/implementation  strategies (i.e., production system will need to be functional in a transition-state  for an extended period) • Intermediate understanding of MPLS
 
  Test Engineer Additional Requirements
  • Experience with Test Plan/Procedure documentation  • Experience supporting DIACAP processes and ISSE • Location required in San Diego  • Certifications and/or equivalent experience: 8570 Certification (CISA, GSE, or  GCIH, Sec+ or CISSP). 				
					 | 
				 
				
				  |  	
				 |  
					 
				  |  
				
				
				 
													
		 
					
  		
		 | 
		  |