<p>Kforce has a client that is seeking a GCP Principal Network Engineer in Englewood, CO. The client is looking for a highly skilled and experienced Engineer in both On-premise and GCS Cloud Network to join our dynamic team.</p> <p>Duties:</p> <ul> <li>Design, configure, and optimize GCS networking components, such as VPCs, subnets, route tables, and security groups </li><li>Implement security best practices and compliance standards within the AWS network infrastructure </li><li>Configure and manage network security groups, network ACLs, and other security features to protect sensitive data and resources </li><li>Develop and maintain automation scripts and templates for network provisioning, configuration, and scaling using GCS CloudFormation or other infrastructure as code (IAC) tools </li><li>Maintain comprehensive documentation of network configurations, diagrams, and standard operating procedures (SOPs) to ensure efficient knowledge sharing and compliance </li><li>Optimize network resources to control costs while maintaining performance and scalability </li><li>Identify opportunities for cost savings in network architecture and usage </li><li>Monitor network usage trends and plan for capacity expansion or optimization based on business requirements </li><li>Monitor and optimize network performance, ensuring low latency, high availability, and fault tolerance </li><li>Implement GCS services like Amazon CloudFront, Elastic Load Balancing (ELB), and Amazon Route 53 for optimal traffic distribution </li><li>Design, configure and monitor network equipment, network usage and systems availability </li><li>Support and troubleshoot various IP technologies, including but not limited to: Network connectivity, IP addressing, Routing Protocols (BGP, OSPF), HSRP, VPNs, IPSec, Load balancing, QOS, SNMP and 802.11x </li><li>Provide configuration and troubleshooting support for Ethernet Switches, Routers, Load-Balancers, VPN Concentrators, Firewalls, and networked servers* Bachelor's degree in Computer Science or related field </li><li>Cisco Certified Network Professional (CCNP) certification required </li><li>AWS Certified Advanced Network required </li><li>5+ years managing LAN/WAN networks (2+ years working as a Network Engineer) </li><li>Proven experience in designing, implementing, and managing AWS network environments </li><li>Thorough knowledge and experience with Cisco network devices, including but not limited to 7200/2901 Routers, PIX 515/ASA 5510 Firewalls, 2900/3500/3560 switches, CSS 11500, AP 1200/1142, and ACS 1121 </li><li>Advanced level understanding of protocols such as TCP/IP, UDP, SNMP, etc. </li><li>Working knowledge of internet services such as DNS, RADIUS, and LDAP </li></ul> <p>Design, configuration and troubleshooting experience:</p> <ul> <li>Routing: Virtual interfaces, BGP, OSPF, MPLS, EIGRP, RIP, PBR, QoS, Static Routing, Unsymmetrical Routing, Router NAT, HSRP/VRRP, ACL's, NTP, SNMP, Password Recovery </li><li>Switching: VLAN, VLAN Bleed, 802.1D, 802.1Q, 802.1X, VTP, Multilayer switching/routing, Multicasting </li><li>Firewalls: Interface priority, public vs Private IP space, Conduits/ACLs, Cryptography, Firewall NAT (static & dynamic), Hot Failover, Common TCP/UDP Ports, IPSEC, VPN, Policy Maps, Logging, Routing </li><li>Load Balancing: Routing, VIPs, Service Interfaces, Certificate Intercept, Owner Mapping, Load Balancing Algorithms, Content Grouping </li><li>Analytical and detailed oriented, with the ability to plan, organize and prioritize work to meet target project dates </li><li>Independent-thinker and self-starter, who can work well within a team environment </li><li>Communicates clearly and in an understandable manor with a wide range of people such as managers, customers, vendors, and the general public </li><li>Demonstrated ability to effectively advice and counsel both managers and non-supervisory employees on sensitive work-related issues </li><li>Demonstrated analytical and problem-solving skills, and the ability to organize and prioritize several projects and tasks at one time </li></ul>