Senior Network Engineer

Eagle Harbor Solutions, a Koniag Government Services company, is seeking a Senior Network Engineer to support EHS and our government customer. This is a Remote opportunity. This position can be remote but requires travel to the locations listed.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
Network Engineer shall serve as a subject matter expert for IT Telecommunication Systems as the point of contact for creating, maintaining, and updating, the UCB ICS networks.
Essential Functions, Responsibilities & Duties may include, but are not limited to:
• Responsible for the design of the SCADA network and overseeing all related activities related to deployment and commissioning of the ICS networks.
• Reviews and provide configuration recommendations for all ICS network equipment. Prepares and provides documentation on ICS network as directed.
• This is a remote position and will require travel to perform on-site visits, assessments, and tasks.
Experience:
• Experience with CISCO routing and switching infrastructure, CISCO ASA Firewalls, CISCO IOS NetFlow, SolarWinds suite for monitoring tracking and maintaining infrastructure, Nessus, and Wireshark is highly desired.
• Support the Glen Canyon ICS-Operations group, located in Page, Arizona, in ICS network related tasks as described herein.
• Conducting a comprehensive assessment of the existing ICS networks.
• The assessment involves identifying the current network configurations and available infrastructure, analyzing traffic patterns, and reviewing security measures and documentation.
• Subsequently, the engineer will design a modernized network architecture that incorporates standard network security practices, such as centralized logging, intrusion detection system (IDS), and management and monitoring tools.
• The design will ensure the network meets NERCCIP and FISMA regulatory standards and applies security best practices and controls in accordance with the NIST SP 800 series.
• Advise and aid in the procurement, installation, configuration, and testing of network devices.
• Assist with the coordination to properly interface equipment with Western, the WAN service provider, and provide guidance to ensure successful integration.
• Ensure effective knowledge transfer to enable Reclamation to operate and maintain the ICS networks.
• Support Reclamation in other areas pertaining to network engineer, such as the development of compliance documentation, policies, and procedures.
• Serve as a subject matter expert and point of contact for creating, maintaining, and updating, the UCB ICS networks.
• Provides expert advice, counsel, and instruction to employees, supervisors, and management on issues pertaining to CRSP ICS network and the administration of it.
• Ensure continuous performance of the ICS networks by analyzing, monitoring, and optimizing the network’s performance and security.
• Follow Reclamation’s change management processes, test all changes in a representative test environment before implementation in production, identify and resolve technical issues after implementation of changes, as-well as identify and provide recommendations for violation resolutions, and log activity.
• Provide system security contributions to:
• System security assessments and plans to assure the inclusion of the network security plans and posture.
• Authority and Assessment process and documentation.
• Identify and aid in the mitigation of network security vulnerabilities and risks.
• Participates in the resolution of Plan of Action and Milestones (POAMS) items relating to infrastructure service areas while coordinating with UCB Cyber Security group and ISSOs.
• Perform a network assessment and requirements analysis to understand the specific needs and requirements of the ICS networks, such as available infrastructure, bandwidth, latency, redundancy, and security to develop system requirements.
• Provide Network Assessment Report for Reclamation’s Review and Approval.
• Design and provide a modernized SCADA Network Design that shall be in accordance with the requirements of the task order.
• Responsible for the design of the modernized SCADA network.
• Collaborate with Reclamation’s design team in charge of the SCADA Modernization project to share information regarding the network design and collect information on the SCADA end-point devices to facilitate an inclusive design.
• The SCADA network design shall support near real-time data communication between remote sites and control centers.
• Incorporate network equipment redundancy at Reclamation’s control centers and configure m