Share this Job

Network Engineer

Date: Jan 23, 2022

Location: Oak Ridge, TN, US, 37830

Company: Oak Ridge National Laboratory

Requisition Id 6881 


The Information Technology Services Division (ITSD) in the Business Systems Directorate at the Oak Ridge National Laboratory (ORNL) is seeking qualified applications for the position of Network Engineer.  The position’s primary work duties are network engineering, firewall administration, and providing technical consulting to various work-for-others projects.  


Major Duties/Responsibilities: 

  • The primary responsibility for this position is network design, architecture, and troubleshooting 
  • Responsible for the daily secure operations of the enterprise firewalls 
  • Interfacing with and providing outage reports to various levels of management. 
  • Ensure firewalls are configured and maintained per cyber security common control requirements so that accreditation is retained. 
  • Refresh equipment to be compliant with hardware lifecycle 
  • Continuous improve of processes regarding all aspects of networking and firewall administration 
  • Automation of processes and recurring tasks 
  • Manage capacity and performance of the firewall and network platforms, ensuring all equipment is operating optimally 
  • Diagnose and resolve complex configuration and troubleshooting issues within a multi-vendor infrastructure. 
  • Lead multiple projects and provide solutions as needed  
  • Manage and maintain VPN environment 
  • Assist with other projects as needed 


Qualifications Required: 

  • Bachelor’s Degree in Engineering, Computer Science, or a related field with a minimum of 8 years relevant experience is required.  An equivalent combination of education and experience will be considered.   
  • Knowledgeable in the use of network and configuration management. Working knowledge of Cisco IOS, Arista, JUNOS, routers, multilayer switch, and layer 2 & 3 switch configuration and deployments.  
  • Cisco and Palo Alto experience highly desired. 
  • Knowledge of Cisco, Arista and Juniper Routers/Switches including Catalyst, Nexus, MX, EX, SRX. 
  • Knowledge of Python, REST-API, Shell Scripting and other scripting languages highly desired. 
  • Algosec or other firewall management tools. 
  • Familiarity with Zero Trust framework 
  • Client VPN technologies, such as Cisco AnyConnect, Global Protect. 
  • Implementation and Design of IPSEC VPN. 
  • Design, implement, and operate a multi-datacenter network. 
  • Familiarity with IPv6 implementations. 
  • Experience with vulnerability scanning. 
  • Ability to lead projects responsibly with or without supervision. 
  • Working knowledge of routing protocols (OSPF, BGP, etc.) 


This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment.

If you have trouble applying for a position, please email

ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply.  UT-Battelle is an E-Verify employer.

Nearest Major Market: Knoxville