SSA NISS3

Update 12/19/24 - BR can go up to $65/hr

Job Title: Network Security Engineer - Level 2
Length: Base plus 4 Option Years
Position location: Baltimore (2 days in office per week)
Number of positions requested: 2
Hours of work per week: 32 - 40
Target Rate: $60
Description of Work:
Sidekick Security is seeking a skilled and dynamic Network Engineer Level II to join our team
supporting the Social Security Administration's (SSA) NISS3 contract in Baltimore, MD. This role involves a hybrid work schedule with two days on-site each week. The ideal candidate will have extensive experience in network design, deployment, and operations within enterprise
environments.

Duties and Responsibilities:
• Deploy and maintain enterprise wireless LAN network infrastructure.
• Analyze and implement changes to current wireless LAN configurations.
• Configure routing protocols and complex switching configurations.
• Prepare network equipment for deployment following pre-engineered design templates.
• Coordinate hardware delivery and site installations.
• Upgrade network equipment configurations to support new features.
• Collaborate with field installation contractors for on-site surveys and hardware installations.
• Evaluate potential network products or solutions.
• Test LAN/WAN and WLAN software and firmware.
• Develop and maintain network documentation, including diagrams, standards, and procedures.
• Identify and implement network/system performance enhancements.
• Provide third-level network troubleshooting and after-hours support as needed.
• Lead network installation and upgrade projects while maintaining deployment schedules.
• Offer technical guidance to team members and report project metrics.
Basic Qualifications:
• Bachelor's degree and 5 years of relevant experience, or Master's degree and 3 years of
relevant experience, or 9 years of relevant IT experience in lieu of a degree.
• Cisco Certified Network Professional (CCNP) or equivalent certification.
• Minimum of three (3) years of hands-on experience with routing and switching in
medium to large enterprise networks.
• Ability to obtain and maintain a Public Trust clearance.
Preferred Qualifications:
• Experience supporting SSA or similar government agencies.
• Proficiency in Python scripting and Regular Expressions.
• Experience implementing Cisco Identity Services Engine (ISE) in multi-data center environments.
• Familiarity with Cisco VPN, ASA, and Wireless LAN solutions.
• Experience with wired and wireless networking hardware and physical media.
• Strong oral and written communication skills.
Work Qualification:
• Must be a U.S. citizen, lawful permanent resident, or protected individual as defined by
8 U.S.C. 1324b(a)(3).
• Must be able to achieve a Public Trust clearance.

1. This person is going to be working amidst the broader networking engineering and security operations team, supporting both day-to-day operations as well as broader modernization efforts centered around networking.
2. It will require 2 days per week on-site in Baltimore/Woodlawn
3. CCNP REQUIRED

Sample screening questions are below.
Network Configuration: How do you configure VLANs and ensure inter-VLAN communication in a multi-switch network
Sample Answer: Configuring VLANs involves creating VLANs on switches, assigning ports to the appropriate VLANs, and configuring a Layer 3 device like a router or Layer 3 switch to enable inter-VLAN routing. This setup typically involves enabling trunking on inter-switch links using protocols like 802.1Q and configuring sub-interfaces or SVIs (Switch Virtual Interfaces) on the Layer 3 device.

Wireless Networking: Explain the key considerations when deploying an enterprise wireless LAN solution for a large campus.
Sample Answer: Key considerations include conducting a thorough site survey, ensuring coverage and capacity planning, selecting appropriate access points, and optimizing placement. It's also crucial to implement robust security measures like WPA3, 802.1X authentication, and network segmentation. Planning for scalability, redundancy, and future growth is equally important.

Automation and Scripting: Have you used automation tools like Python scripts for network tasks? Provide an example.
Sample Answer: Yes, I have used Python scripts for automating routine network tasks such as device configuration backups, monitoring network health, and performing bulk configuration changes. For example, I wrote a Python script using Paramiko and Netmiko libraries to connect to Cisco devices, retrieve configuration files, and store them in a version-controlled repository for compliance tracking.

---