Senior IT Network Engineer

Start 2025 with an amazing career at STScI! The Space Telescope Science Institute (STScI) is a multi-mission science and flight operations center for NASA’s flagship observatories- Hubble, Webb & Roman on the Johns Hopkins University Homewood campus in Baltimore, Maryland. Learn more about our missions.

This position can support hybrid work. Candidates must reside in or be willing to relocate to our local market. (MD, DE, VA, PA, DC & WV).

This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.

The Information Technology Services Division (ITSD) is seeking a Senior Network Engineer. The primary responsibilities of the individual filling this position will be providing leadership, guidance and support of the Institute's Network Infrastructure both on-site and in the AWS cloud.

Responsibilities include:

• Working collaboratively with IT, vendors and STScI staff to evaluate and verify the design, installation, configuration and maintenance of the network infrastructure.
• Work with the AWS DevOps team to support ongoing cloud initiatives.
• Work directly with STScI staff to design and implement network solutions that support mission, science, and information security objectives.
• Work with information network and security staff to implement new network architectures, defensive technologies, and monitoring solutions.
• Assist in daily maintenance and problem resolution. Serve as a resource for Service Desk ticket support.
• Work in a collaborative team environment, sharing all knowledge and skills with other team members.
• Modify and update the configuration for all network infrastructure devices.
• Review, audit, and support all network systems.

Required Qualifications:

• Candidate must have a minimum of 5-10 years of progressive technical expertise in the network domain.
• Experience with AWS Networking and Security.

• AppSec automation experience for embedding & supporting integrated security checks in build pipelines.
• Proficient in Docker, Kubernetes, and AWS ECS/EKS for container management and orchestration networking and security.
• Experience with developing IaC (Infrastructure as Code) modules for AWS multi-account framework & AWS organizations, with experience in AWS services such as VPC networking, Transit Gateway, Network Firewalls, Load Balancers, etc.
• Knowledge of network performance, scalability best practices and disaster recovery processes
• Knowledge of DevOps, and Automation, Ci/CD, Software Engineering best practices
• Hands on experience with:
  • Cisco routing and switching hardware
  • DNS
  • Troubleshooting skills using various tools (command line, packet capturing, etc.)
  • SSL / IPSEC VPN (Cisco ASA)
  • WAN Protocols such as BGP (Border Gateway Protocol), IPsec (Internet Protocol Security), Open Shortest Patch First (OSPF), etc.
  • Securing both wired and wireless networks
  • Performance/flow monitoring statistics
  • Scripting skills required - shell scripts, Python preferred including familiarity with CloudFormation/Terraform, JSON, YAML
• Demonstrated ability and knowledge of networking architectures
• Experience supporting DevOps environments. A strong understanding of the SDLC, CI/CD, and the Agile software development methodology including experience with deployment automation
• Excellent customer service and communication skills
• Ability to work independently with minimal supervision
• Significant experience in the configuration and management of routers, switches, DNS, and modern and secure network designs
• Must have a good understanding of applications such as L3 and L2 VPNs
• Experience supporting a highly technical and/or research-based environment

Desirable Qualifications:

• Experience managing and trouble-shooting proxy servers, virtual private networking, remote access solutions, and firewalls from Cisco, Check Point, etc.
• Firewall management (Check Point preferred but not required)
• Web Application Firewalls (WAF).
• Web application security (for example OWASP top 10)
• Security+, CISSP, GIAC, CCNA/CCNP, ITIL/PMP/PMI, AWS Security Specialty certification is a plus
• AWS Advanced Networking Specialty Certification

Compensation is commensurate with education and experience. Salary range - $125,000 -135,000. Explore Our Benefits!

• Employer retirement contribution – direct STScI contribution of 10% of your salary from your first day
• 12 days sick leave, 24 days’ vacation, and 10 paid holidays your first year
• Comprehensive medical/dental/vision/prescription plans, and more!

TO APPLY: Please complete an on-line application by February 7, 2025 to receive full consideration. Applications received after this date will be considered until the position is filled.

Direct link: https://recruiting2.ultipro.com/SPA1004AURA/JobBoard/93330e50-7b3a-4ba8-94f2-6f32360aa4e1/Opportunity/OpportunityDetail?opportunityId=79b6b3e0-918c-451d-a3b3-005773e4055c

STScI offers a flexible and welcoming workspace for all. STScI embraces the diversity of our staff as a strategic priority in creating a first-rate community. We strongly encourage women, ethnic minorities, veterans, and disabled individuals to apply for these opportunities. Veterans, disabled individuals, or wounded warriors needing assistance with the employment process can contact us at careers@stsci.edu EOE/AA/M/F/D/V.

As a leader in the astronomical community, AURA is committed to diversity and inclusion. AURA develops and supports programs that advance our organizational commitment to diversity, broaden participation, and encourage the advancement of diversity throughout the workforce www.aura-astronomy.org/diversity.asp

As a recipient of U.S. Government funding, AURA is considered a government contractor subject to Equal Employment Opportunity and Affirmative Action regulations. As an Equal Opportunity and Affirmative Action Employer, AURA and all of the centers do not discriminate based on race, sex, age, religion, national origin, sexual orientation, gender identity/gender identity expression, lawful political affiliations, veteran status, disability, and any other legally protected status under applicable federal, state, and local equal opportunity laws. The statements below, as well as the requests for self-identification, are required under these regulations. We encourage your participation in meeting these federal reporting requirements for protection and assisting us in our record-keeping and reporting. Your responses are kept strictly confidential.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities