SME network engineer

- Lead the design, documentation, and maintenance of the CALEA network architecture, covering: - Layer 2/Layer 3 topology - IP address schema and subnetting - VLAN/VRF segmentation - Routing design (OSPF, BGP, EIGRP, static) - Firewall zoning, NAT policies, and security segmentation - VPN tunnels and PKI integrations - COOP/DR network routing and failover paths. - Produce and maintain authoritative network diagrams, data flows, trust boundaries, and configuration baselines. - Assess, recommend, and implement improvements to enhance security, availability, and performance. - Act as the primary network engineer for diagnosing, resolving, and preventing outages across the CALEA enterprise. - Conduct packet-level analysis, flow analysis, and log correlation to troubleshoot and resolve issues. - Oversee network upgrades, configuration changes, ACL adjustments, and planned maintenance activities. - Monitor network performance and availability, adjusting routing, firewall, and VPN settings as needed. - Design and maintain firewall policies and segmentation in Palo Alto or Fortinet - Assist in security hardening, vulnerability remediation, and IA/ATO documentation requirements. - Generate accreditation-ready artifacts, such as boundary diagrams and data-flow representations. - Collaborate with ISSO and security teams to address security findings and enhance compliance. - Document and support network dependencies across various systems, including Active Directory and VMware. - Validate system functionality post-network changes. - Work in conjunction with Systems, Virtualization, Storage, and Field SMEs to ensure smooth operations across CALEA sites. - Contribute to COOP/DR planning, design, and testing for high availability capabilities. - Support lab environment setup for replication and network simulation. - Maintain comprehensive technical documentation, including diagrams, SOPs, and configuration records. - Coordinate with Harmonia and ICE technical leads to resolve technical issues and ensure mission readiness.