Network Architect

Stellenbeschreibung:

Trace Systems is seeking a cleared Network Architect SME to provide expert level technical support regarding the design, configuration, implementation, operational management and troubleshooting of the Enterprise Network on‑site in Stuttgart, Germany.

Duties and responsibilities to include particular emphasis on design, implementation, and support of architectures but not limited to:

Design, implement, and maintain highly reliable and scalable network systems.
Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN, MPLS Segment‑Routing).
Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
Deploy, manage, and update Palo Alto and Cisco Firepower firewalls, including centralized management platforms (Panorama, FMC).
Administer Cisco Identity Services Engine (ISE) for secure endpoint access, policy enforcement, and Zero Trust architecture support.
Provision, key, and maintain KG encryptors (e.g., TACLANE) to secure classified and mission‑critical traffic.
Develop automation frameworks and leverage network automation tools (Ansible, Python, REST APIs) to streamline deployments and support Software‑Defined Access (SDA).
Maintain core network services including F5 load balancers and Infoblox for DNS, DHCP, and IPAM.
Proactively identify and resolve performance bottlenecks and single points of failure.
Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
Gather and analyze metrics for performance tuning, fault discovery, and after‑action reporting.
Work with operations teams to build automation use‑cases and improve reliability through rigorous testing and release procedures.
BlackCore networks running MPLS, L3VPN, L2VPN, MP‑BGP, OSPF, IS‑IS
Commercial Solutions for Classified (CSfC) solutions
Nexus 5K, 7K, and 9K data center switches operating in ACI & NX‑OS Mode
Cisco ASA Firewalls, FirePOWER, and FTD
F5 Load‑Balancers
VMware ESXi & NSX
Provide network engineering support for core infrastructure spanning multiple Continents in the AFRICOM AOR utilizing diverse transport
Maintain industry best practices and standards for installation, configuration and support of local area network (LAN), wide area network (WAN) for internet systems or a segment of a network system
Provide technical and escalation support to include troubleshooting and break/fix actions
Understand broad client requirements and translate them into documented engineering requirements.
Execute high client initiatives and guide deployment of innovative solutions using the latest technologies to support the warfighte
Develop new strategic initiatives and customer relationships while continuing to enhance preexisting initiatives and relationships
Consolidate, project, and grow pre‑existing efforts
Proactively arrange technology engagements with clients and align trace technology solutions to integrate
Analyze requirements, design, develop and deliver documentation deliverables of solutions lifecycle such as design, process, policy, techniques, tactics, and procedures in a timely manner.

Minimum Qualifications:

An Active, in‑scope US Government issued active Secret clearance, with eligibility for TS/SCI.
Due to the nature of the work and contract requirements, US Citizenship is required.
Fifteen (15) years of experience with Routing and Switching protocols.
Fifteen (15) years of experience with Network Security protocols.
Fifteen (15) years of experience with Data Center Technologies.
Fifteen (15) years of experience with Global Enterprise Networks.
Current IAT Level II certification (Security+ce, etc. or higher).
CCIE Certification
Ability to meet TESA requirements to deploy OCONUS.