Network Architect SME

Job Title: Network Architect SME

Job Location:Stuttgart Germany

Trace Systems is seeking a cleared Network Architect SME to provide expert level technical support regarding the design configuration implementation operational management and troubleshooting of the Enterprise Network on-site in Stuttgart Germany.

Duties and responsibilities to include particular emphasis on design implementation and support of architectures but not limited to:

• Design implement and maintain highly reliable and scalable network systems.
• Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN MPLS Segment-Routing).
• Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
• Deploy manage and update Palo Alto and Cisco Firepower firewalls including centralized management platforms (Panorama FMC).
• Administer Cisco Identity Services Engine (ISE) for secure endpoint access policy enforcement and Zero Trust architecture support.
• Provision key and maintain KG encryptors (e.g. TACLANE) to secure classified and mission-critical traffic.
• Develop automation frameworks and leverage network automation tools (Ansible Python REST APIs) to streamline deployments and support Software-Defined Access (SDA).
• Maintain core network services including F5 load balancers and Infoblox for DNS DHCP and IPAM.
• Proactively identify and resolve performance bottlenecks and single points of failure.
• Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
• Gather and analyze metrics for performance tuning fault discovery and after-action reporting.
• Work with operations teams to build automation use-cases and improve reliability through rigorous testing and release procedures.
• BlackCore networks running MPLS L3VPN L2VPN MP-BGP OSPF IS-IS
• Commercial Solutions for Classified (CSfC) solutions
• Nexus 5K 7K and 9K data center switches operating in ACI & NX-OS Mode
• Distributed Multicast architectures
• Cisco Data Center enviornmments utilizing ACI & HCI deployment models
• Cisco ASA Firewalls FirePOWER and FTD
• F5 Load-Balancers
• VMware ESXi & NSX
• Provide network engineering support for core infrastructure spanning multiple Continents in the AFRICOM AOR utilizing diverse transport
• Maintain industry best practices and standards for installation configuration and support of local area network (LAN) wide area network (WAN) for internet systems or a segment of a network system
• Provide technical and escalation support to include troubleshooting and break/fix actions
• Understand broad client requirements and translate them into documented engineering requirements.
• Execute high client initiatives and guide deployment of innovative solutions using the latest technologies to support the warfighte
• Develop new strategic initiatives and customer relationships while continuing to enhance preexisting initiatives and relationships
• Consolidate project and grow pre-existing efforts
• Proactively arrange technology engagements with clients and align trace technology solutions to integrate
• Analyze requirements design develop and deliver documentation deliverables of solutions lifecycle such as design process policy techniques tactics and procedures in a timely manner.

• An Active in-scope US Government issued active Secret clearance with eligibility for TS/SCI.
• Due to the nature of the work and contract requirements US Citizenship is required.
• Fifteen (15) years of experience with Routing and Switching protocols.
• Fifteen (15) years of experience with Network Security protocols.
• Fifteen (15) years of experience with Data Center Technologies.
• Fifteen (15) years of experience with Global Enterprise Networks.
• Current IAT Level II certification (Securityce etc. or higher).
• CCIE Certification
• Ability to meet TESA requirements to deploy OCONUS.

• IAT-III Certification (CISSP CASP GCIH etc)
• ITILv4 Foundations Certification

• Bachelors Degree plus 3 years of recent specialized experience OR
• An Associates Degree plus 7 years of recent specialized experience OR
• Major Certification plus 7 years of recent specialized experience OR
• 11 years of recent specialized experience.

Trace Systems Inc. was founded to support and defend our nations security interests at home and abroadwhenever and wherever. We provide enterprise IT engineering full life-cycle communications cybersecurity cloud and virtualization services and solutions to the United States Department of Defense and other federal agencies.

To Apply:We invite you to put your talents to work by joining a growing team of dynamic professionals here atTrace Systems! Be part of a culture at our leading-edge company where you can achieve great things while fostering a satisfying and rewarding career progression. To learn more about our current openings text tracejobs to 97211 or apply directly through our website at:. #jointracesystems

Trace Systems is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.

Trace Systems is seeking a cleared Network Architect SME to provide expert level technical support regarding the design configuration implementation operational management and troubleshooting of the Enterprise Network on-site in Stuttgart Germany.

Duties and responsibilities to include particular emphasis on design implementation and support of architectures but not limited to:

• Design implement and maintain highly reliable and scalable network systems.
• Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN MPLS Segment-Routing).
• Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
• Deploy manage and update Palo Alto and Cisco Firepower firewalls including centralized management platforms (Panorama FMC).
• Administer Cisco Identity Services Engine (ISE) for secure endpoint access policy enforcement and Zero Trust architecture support.
• Provision key and maintain KG encryptors (e.g. TACLANE) to secure classified and mission-critical traffic.
• Develop automation frameworks and leverage network automation tools (Ansible Python REST APIs) to streamline deployments and support Software-Defined Access (SDA).
• Maintain core network services including F5 load balancers and Infoblox for DNS DHCP and IPAM.
• Proactively identify and resolve performance bottlenecks and single points of failure.
• Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
• Gather and analyze metrics for performance tuning fault discovery and after-action reporting.
• Work with operations teams to build automation use-cases and improve reliability through rigorous testing and release procedures.
• BlackCore networks running MPLS L3VPN L2VPN MP-BGP OSPF IS-IS
• Commercial Solutions for Classified (CSfC) solutions
• Nexus 5K 7K and 9K data center switches operating in ACI & NX-OS Mode
• Distributed Multicast architectures
• Cisco Data Center enviornmments utilizing ACI & HCI deployment models
• Cisco ASA Firewalls FirePOWER and FTD
• F5 Load-Balancers
• VMware ESXi & NSX
• Provide network engineering support for core infrastructure spanning multiple Continents in the AFRICOM AOR utilizing diverse transport
• Maintain industry best practices and standards for installation configuration and support of local area network (LAN) wide area network (WAN) for internet systems or a segment of a network system
• Provide technical and escalation support to include troubleshooting and break/fix actions
• Understand broad client requirements and translate them into documented engineering requirements.
• Execute high client initiatives and guide deployment of innovative solutions using the latest technologies to support the warfighte
• Develop new strategic initiatives and customer relationships while continuing to enhance preexisting initiatives and relationships
• Consolidate project and grow pre-existing efforts
• Proactively arrange technology engagements with clients and align trace technology solutions to integrate
• Analyze requirements design develop and deliver documentation deliverables of solutions lifecycle such as design process policy techniques tactics and procedures in a timely manner.

• An Active in-scope US Government issued active Secret clearance with eligibility for TS/SCI.
• Due to the nature of the work and contract requirements US Citizenship is required.
• Fifteen (15) years of experience with Routing and Switching protocols.
• Fifteen (15) years of experience with Network Security protocols.
• Fifteen (15) years of experience with Data Center Technologies.
• Fifteen (15) years of experience with Global Enterprise Networks.
• Current IAT Level II certification (Securityce etc. or higher).
• CCIE Certification
• Ability to meet TESA requirements to deploy OCONUS.