Network Engineer – NMS and Automation (w/ active Secret)

Network Engineer – NMS and Automation (w/ active Secret) Location: Norfolk, VA Clearance: Secret Type: Full-time, Onsite Salary Range: $87,000 - $112,000. Salary range may vary depending on location. JOB DESCRIPTION Critical Solutions is seeking a Network Engineer - Network Management Systems (NMS) and Automation to support our federal customer. The NMS team member must possess expert command of the monitoring ecosystem, leveraging specific tools to deliver core organizational advantages: Functional Domain Tool Mechanics / Features Business & Operational Benefits Fault & Performance Monitoring Continuous SNMP/ICMP polling Real-time alerting mechanisms Synthetics & packet analysis • Minimizes MTTR: Faster root-cause isolation lowers Mean Time to Resolution. Reduces Downtime: High-availability metrics prevent outages before they cascade Configuration & Change Control • Automated backups of device configs Real-time configuration drift detection Mass configuration deployments • Ensures Compliance: Restores safe baseline settings rapidly during bad changes. Secures Network: Flashes alerts on unauthorized or rogue configuration alterations. Traffic Analytics & Planning • NetFlow / sFlow / IPFIX collection Historical data trending charts Dynamic topology mapping • Cost Optimization: Validates bandwidth usage patterns for smarter capacity planning. Uncovers Bottlenecks: pinpoints bandwidth hogs and abnormal traffic spikes. PRIMARY ROLES AND RESPONSIBILITIES: RHEL 8 Back-End Operations & System Administration: Operating System (OS) Lifecycle Management: Provision, configure, and maintain RHEL 8 servers hosting the core NMS applications across physical, virtual, and air-gapped environments. Kernel & Performance Tuning: Optimize Linux kernel parameters, memory allocation, and storage subsystems to handle massive telemetry and configuration data intake (SNMP, NetFlow, Syslog, SSH, SCP) without data loss. Patching & Vulnerability Mitigation: Leverage Red Hat Satellite or custom repositories to manage package rollouts, applying routine security errata and OS updates. Automation & IaC: Write and maintain Ansible playbooks and other language scripts to automate server provisioning, user management, and repetitive operational tasks related to NMS tool objects. Security & Compliance: Enforce security Linux policies, access rules, and STIG compliance to ensure the monitoring platform resists compromise. Storage & File System Management: Configure and expand LVM (Logical Volume Manager) structures to manage high-write NMS databases and syslog partition scaling. NMS Application & Tool Support Platform Administration: Deploy, upgrade, and troubleshoot enterprise-grade NMS applications (Open Text NNMi, Open Text Network Automation, Cisco Catalyst Center, Arista Cloud Vision, Aruba Airwave and others). Data Integration: Architect and maintain integrations between NMS engines, CMDB asset databases, and ITSM platforms like ServiceNow via APIs. Polling & Telemetry Management: Configure polling intervals, customize SNMP MIBs and traps, and set up NetFlow collectors to build clear network matrices. Fault Isolation & Alerting: Construct alerting logic, thresholds, and notification profiles to minimize alert fatigue while ensuring critical outages surface instantly. BASIC QUALIFICATIONS: Active Secret clearance Education: Bachelor's degree in computer science, IT, Network Engineering, or an equivalent technical field. OS Specialization: Hands-on experience administering RHEL 8 environments (RHCSA or RHCE certifications preferred). Core Linux Skills: Advanced knowledge of systemd, system logging (rsyslog, journald), and native RHEL troubleshooting utilities (top, iotop, netstat, tcpdump). Protocols: Deep knowledge of networking protocols including SNMP (v3), Syslog, SSH, ICMP, NetFlow, and TACACS+/RADIUS. Automation: Proficiency in Ansible and scripting languages (Python, Bash) to run configuration infrastructure as code Core Technical Skills Network Engineering: Functional understanding of advanced multivendor routing and switching network environments. (Cisco, Arista, Brocade, Juniper, McAfee and others) Network Security: Functional understanding of enterprise firewalls and robust Access Control Lists (ACLs). Infrastructure Administration: Comprehensive lifecycle management and administration of diverse network nodes. Automation & DevOps Network Scripting: Proficiency in modern scripting languages like Python, PowerShell and YAML for network task automation. Infrastructure as Code: Proficiency in Ansible playbook development, testing, and deployment. Network Automation: Hands-on experience with network nodes configuration management and automated provisioning. Automated Policy Management: Ability to design and deploy automated policy enforcement mechanisms across network infrastructure. Network Management Systems (NMS) & Operations NMS Administration: Expert-level administration, configuration, and end-to-end support of complex Network Management Systems like, Cisco Catalyst Center, OpenText Network Automation (NA), OpenText Network Node Manager (NNMi), and Arista CloudVision. Linux & Container Infrastructure: Hands-on RedHat 8 administration, support, and Kubernetes orchestration for modern NMS deployments. Performance Optimization: Continuous monitoring and proactive tuning of network nodes for peak performance. Analytical & Leadership Skills Advanced Problem Solving: Deep analysis of complex, ambiguous technical situations to drive root-cause resolution. Executive Communication: Synthesis of complex technical data into concise, high-level summaries for executive decision-making. Collaboration & Communication Cross-Regional Collaboration: Proven experience working effectively with distributed, cross-functional teams located across the United States. Remote Team Synergy: Skill in utilizing modern collaboration tools to bridge geographical gaps and maintain project alignment. Workplace Adaptability: Demonstrated reliability and productivity managing a flexible 40-hour workweek schedule. LOCATION: On-site 100%. Norfolk, VA Other acceptable work location: Jacksonville, FL or Pearl Harbor ADDITIONAL INFORMATION: CLEARANCE REQUIREMENT: Must possess an active DoD Secret Clearance. In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED. CRITICAL SOLUTIONS PAY AND BENEFITS: Salary range $87,000 - $112,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements. BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more.