Network Architect SME

Stellenbeschreibung:

Job Overview

Trace Systems is seeking a cleared Network Architect SME to provide expert level technical support regarding the design, configuration, implementation, operational management and troubleshooting of the Enterprise Network on-site in Stuttgart, Germany.

Responsibilities

Design, implement, and maintain highly reliable and scalable network systems.
Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN, MPLS Segment‑Routing).
Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
Deploy, manage, and update Palo Alto and Cisco Firepower firewalls, including centralized management platforms (Panorama, FMC).
Administer Cisco Identity Services Engine (ISE) for secure endpoint access, policy enforcement, and Zero Trust architecture support.
Provision, key, and maintain KG encryptors (e.g., TACLANE) to secure classified and mission‑critical traffic.
Develop automation frameworks and leverage network automation tools (Ansible, Python, REST APIs) to streamline deployments and support Software‑Defined Access (SDA).
Maintain core network services including F5 load balancers and Infoblox for DNS, DHCP, and IPAM.
Proactively identify and resolve performance bottlenecks and single points of failure.
Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
Gather and analyze metrics for performance tuning, fault discovery, and after‑action reporting.
Work with operations teams to build automation use‑cases and improve reliability through rigorous testing and release procedures.
BlackCore networks running MPLS, L3VPN, L2VPN, MP‑BGP, OSPF, IS‑IS.
Commercial Solutions for Classified (CSfC) solutions.
Nexus 5K, 7K, and 9K data center switches operating in ACI & NX‑OS Mode.
Distributed Multicast architectures.
Cisco Data Center environments utilizing ACI & HCI deployment models.
Cisco ASA Firewalls, FirePOWER, and FTD.
F5 Load‑Balancers.
VMware ESXi & NSX.
Provide network engineering support for core infrastructure spanning multiple continents in the AFRICOM AOR utilizing diverse transport.
Maintain industry best practices and standards for installation, configuration and support of local area network (LAN), wide area network (WAN) for internet systems or a segment of a network system.
Provide technical and escalation support to include troubleshooting and break/fix actions.
Understand broad client requirements and translate them into documented engineering requirements.
Execute high client initiatives and guide deployment of innovative solutions using the latest technologies to support the warfighte.
Develop new strategic initiatives and customer relationships while continuing to enhance preexisting initiatives and relationships.
Consolidate, project, and grow pre‑existing efforts.
Proactively arrange technology engagements with clients and align trace technology solutions to integrate.
Analyze requirements, design, develop and deliver documentation deliverables of solutions lifecycle such as design, process, policy, techniques, tactics, and procedures in a timely manner.

Minimum Qualifications

An Active, in‑scope US Government‑issued active Secret clearance, with eligibility for TS/SCI.
US Citizenship is required.
Fifteen (15) years of experience with Routing and Switching protocols.
Fifteen (15) years of experience with Network Security protocols.
Fifteen (15) years of experience with Data Center Technologies.
Fifteen (15) years of experience with Global Enterprise Networks.
Current IAT Level II certification (Security+ce, etc. or higher).
CCIE Certification.
Ability to meet TESA requirements to deploy OCONUS.