OVERVIEW:

As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.
The Field Intelligence Operations Division is seeking a skilled and motivated Enterprise-level Senior Network Engineer to support the management and maintenance of our classified network infrastructure. The ideal candidate will have a solid background in network engineering in areas such as, designing, implementing, maintaining, and troubleshooting an organization’s network infrastructure, ensuring smooth data communication by managing and configuring network devices like routers, switches, firewalls, and wireless access points, monitoring network performance, identifying and resolving issues to maximize uptime and security. Ideally, you will have experience working in secure, classified environments and versed with DOE environments. This position involves working closely with senior engineers and other IT and IA professionals to ensure the confidentiality, integrity, and availability of network services in compliance with government security regulations.
As part of our team, you will help be joining a vibrant group of professionals eager to provide premier customer service to ensure people and information technology remain secure. The team is collaborative and strives to ensure security practices and procedures are understood, implemented, and enforced.

BASIC QUALIFICATIONS:

• Bachelor of Science, in Information Technology, Computer Science, or related field with at least eight (8) years of network administration work.
• Additional years of experience may be considered in lieu of a degree.
• Strong communications skills, with the ability to successfully interact with IT peers, Network Engineers and architects.
• Collaborate with DOE-IN, sponsors, inter- and intra-management, departments and other key stakeholders to identify end-user requirements and specifications.
• Extensive experience automating and managing network configurations across enterprise-scale, multi-vendor environments, including infrastructure from Juniper, Cisco, and Palo Alto.
• Expert delivery to streamline deployment, enforce configuration standards, and support advanced networking solutions such as SD-WAN and zero-touch provisioning to ensure efficient and secure network operations.
• Proven aptitude to analyze and interpret user feedback to drive strategic enhancements in enterprise network systems and associated software, ensuring performance, scalability, and alignment with organizational objectives.
• Demonstrated ability to consult with senior leadership to develop and align network and infrastructure strategies with enterprise objectives, with a focus on driving IT modernization through automation initiatives that improve scalability, reduce manual overhead, and enhance operational efficiency.
• Developing technical documentation to guide future network development projects and overall continuity of effort.
• Thorough understanding of network and routing protocols including, but not limited to, TCP/IP, DNS, DHCP, OSPF, SMTP, NFS.
• Knowledge of network security practices, including firewalls, VPNs, and secure access protocols.
• Familiarity with government security standards and regulations (e.g., NIST, DISA STIGs) related to classified networks.

PREFERRED QUALIFICATIONS:

• Experience with DOE, DOD, ICD, and FISMA regulatory requirements is highly desirable.
• TEMPEST training and certification, as well as COMSEC experience, are highly desirable.
• Familiar Cisco Nexus switch architecture, routing protocols such as BGP, OSPF Cisco VoIP and Video environment.
• Cisco certification, such as CCNA or CCNP, is preferred.
• Familiar with firewall security e.g. NIST.
• Motivated self-starter with the ability to work independently and to participate creatively in collaborative teams across the enterprise.
• Ability to function well in a fast-paced environment, set priorities to accomplish multiple tasks within deadlines, and adapt to ever changing needs.
• Serve as a mentor to peer or junior network administrators.

SPECIAL REQUIREMENTS:

Visa sponsorship is not available for this position.
Work may involve various physical requirements and working conditions.
Q clearance with SCI: This position requires the ability to obtain and maintain a Secret Compartmented Information (SCI) clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program. In addition, due the SCI, you may also be subject to random polygraph testing.

• Maintaining computer networks including VPNs, routers, and other physical hardware and devices.
• Installing and configuring network equipment.
• Manage firewalls and update data security and encryptor systems.
• Configure, troubleshoot and patch datacenter infrastructure, including but not limited to: Palo Alto, Cisco, Windows and Linux systems.
• Monitoring computer systems to improve network performance for all systems.
• Troubleshooting, resolving, and communicating networking issues.
• Implementing disaster recovery procedures.
• Responsible for creating and maintaining network related documents and procedures that ensure the successful execution, monitoring of the network.
• Maintaining professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies.