Senior Network Engineer

About the position

Iridium is looking for a Senior Network Engineer to join our Satellite Ops team! This position will play a key role in the development, integration, monitoring, and testing of Iridium's Commercial and Government network infrastructure. The ideal candidate will have a strong background in network design, implementation, and troubleshooting, with a focus on security best practices and system hardening. The Senior Network Engineer will be responsible for designing, implementing, securing and optimizing Iridium's government and commercial network infrastructures, to deliver a fault-tolerant, reliable, scalable, and automated infrastructure.

Responsibilities

• Lead the design, installation, configuration, and troubleshooting of complex network solutions using Cisco (routers, switches, firewalls), configure security appliances and next-generation firewalls such as FortiGate firewalls.
• Develop and maintain security policies, configure and update firewall rules, regularly audit network configurations and access controls, and apply industry-standard security best practices to protect network infrastructure from vulnerabilities.
• Lead real-time troubleshooting and problem resolution support and provide 24x7 assistance as needed. Analyze network traffic, identify bottlenecks, and implement solutions.
• Create and maintain network documentation, including network diagrams, configurations, security policies, and procedures. Adhere to Configuration Management rules required to meet compliance.
• Provide technical guidance and mentorship to junior network engineers and support cross-functional efforts and share your expertise with colleagues to identify and autonomously implement ideas and solutions that create added value for the team and the program.
• Conduct research on network products, services, protocols, and standards to remain abreast of developments in the network industries, technologies, and best practices.

Requirements

• Bachelor's degree in computer science, Computer Engineering, Software Engineering, Information Technology, or related field.
• 8+ years of experience configuring, managing, and maintaining mid-to-large scale commercial and government networking technologies, protocols, and devices such as Cisco Catalyst, Nexus switches, ISR routers, ASA, Firepower, Fortinet solutions FortiGates, FortiAnalyzer, FortiManager, and other vendors networking technologies.
• Strong understanding and hands-on experience configuring and maintaining routing protocols such as OSPF, EIGRP, and BGP.
• Knowledge and hands-on experience configuring and maintaining protocols such as VLANs, STP, QoS, VPNs, SD-WAN, and features such as firewall policies, network segmentation, intrusion detection/prevention systems (IDS/IPS), and VPN configurations.
• Knowledge of network security frameworks (e.g., NIST, CIS, ISO 27001), hardening network infrastructure, experience with or knowledge of USG IAVA and STIG processes and procedures, and knowledge of security compliance standards (e.g., PCI-DSS, HIPAA, GDPR) as they relate to network security.
• Experience configuring network monitoring tools (e.g., SolarWinds, Nagios, PRTG) and implementing monitoring solutions.
• Excellent communication skills, with the ability to clearly convey products, deliverables, analyses, and/or issues to groups outside of your team or those who are unfamiliar with the topic.
• Possess an analytical mindset, with the ability to understand a situation or problem and think critically to make decisions and come up with out-of-the-box solutions.
• Capable of prioritizing your own tasks and potentially the tasks of others while making sure deadlines are met.

Nice-to-haves

• Certifications such as Cisco Certified Network Professional (CCNP) (or higher) and Fortinet Network Security Certified Professional are preferred.
• Experience configuring and managing AWS cloud features, solutions, and services such as VPC, Transit Gateway, and AWS third party commercial network tools and products such as virtual routers and firewalls.
• Experience working in a Linux environment and with VMware or other hypervisor virtualized environments.
• Well versed in use of MS PowerPoint, Excel, and Visio.
• Existing SECRET (or TOP-SECRET) level clearance preferred; ability to obtain clearance.