We are seeking a Network Engineer in Quantico, VA. This is a Senior/SME position, providing firewall/engineering leadership over multiple firewall and perimeter security systems and devices. The well-qualified candidate must be capable of evaluating performance results, performing risk assessments, recommending, and implementing changes impacting the perimeter security team. The candidate must be capable of planning and leading engineering activities to include the testing, implementation, and maintenance of perimeter security technologies and devices and must be capable of communicating and coordinating all firewall related work to the include the government customer.

• Responsibilities:

• Responsible for the design, implementation and support of information security monitoring and protection technologies.

• Build, design, test, deploy, maintain, and troubleshoot perimeter security (Firewall) solutions.

• Deploy, configure, maintain, and troubleshoot network-based intrusion systems, web proxies, network-based dynamic malware engines, and endpoint security solutions. Manage Cisco Firepower platform including but not limited to licensing, update management, patching, and inventory.

• Administer all network hardware and equipment, including routers, switches, wireless access points, and UPS.

• Develop and deploy perimeter security solutions utilizing multi-vendor firewalls, email security, IPS/IDS, SSL/TLS decryption, DMZs, and virtualization/zones for on premise and cloud-based services.

• Experience making use of enterprise tools to monitor and improve network security and performance.

• Perform network, server and security audits, review logs for errors and trends, and ensure proper function of network infrastructure.

• Collaborate with technical SMEs on enterprise-wide solutions, participate in technical working groups.

• Supports the compilation of records and reports concerning perimeter operations and maintenance to analyze the performance of perimeter security systems.

• Provides input to the problem management process, including assessing and evaluating software and hardware anomalies. Supports the root cause analysis efforts to determine problems and develop remediation activities. Interfaces with vendor support service groups to ensure proper support during outages or periods of degraded system performance.

• Supports the transition to operations of perimeter security devices.

• Collaborate with cross-bureaus and agencies to implement network changes as it relates to perimeter security

• Supports the configuration testing of replacement perimeter devices

• Plans, documents, and implements hardware and software build and refresh

• Create and maintain standard operating procedures (SOPs) and guides for new and/or existing perimeter hardware and software.

• Attend weekly meetings, and participates in working groups, as related to constant changing security environment.

#divergent

• Active Top Secret

• Bachelor’s degree in information technology, or equivalent experience

• 7-10 years of Information T security/network engineering experience (security, network infrastructure implementation, and maintenance)

• Expert experience in one or more of the following security devices: Palo Alto firewalls, Panorama management console, Forcepoint/StoneGate firewalls, A10 Encrypted Traffic Inspection/Application Delivery, and Cisco ESA & ASA

• Experience developing and configuring SSL/TLS encryption/decryption solutions for traffic inspection

• Experience supporting the configuration and maintenance of Firewall/DMZ infrastructure including Network and Application Firewall Packet

• Filtering technologies

• Experienced with performing root cause analysis, risk identification, and risk mitigation

• Knowledgeable with configuring Cisco switches

• Recommend and perform network improvements, upgrades, and repairs.

• Strong understanding of routing/switching technologies, IP addressing/subnetting, and network traffic analysis/troubleshooting

• Work experience of Cisco Security product line, ASA and Firepower etc.

• Experience with network monitoring devices such as HP Openview, Nagios, Zenoss, NeuralStar or other similar monitoring tools

Preferred:

• Bachelor’s degree in information technology, or equivalent experience

• Experience as an Information System Security Representative (ISSR) or Information System Security Officer (ISSO)

• Certifications:

• CompTIA Advanced Security Practitioner (CASP), Certified Information Systems Security Professional (CISSP), Cisco CCNP security or JNCIS (or equivalent)

• Experience migrating from ASAs to Firepowers

• Familiarity with IT security systems, policies and procedures)

• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.