Network Engineer 2

Position Summary

In this role, you will design, model, configure, install, and test network security infrastructures (Firewall/IPS/IDS/SEIM) systems for DoD, government, and private companies. You will implement and integrate complex network security systems such as firewalls, IPS/IDS, packet brokers, switches, routers, wireless access and bridging infrastructures, data center infrastructure, security control devices and software defined networking (SDN) technologies for on premise, and hybrid deployments within an Information System (IS). Essential responsibilities and activities include but are not limited to:

• Collaborating with stakeholders and domain experts to define requirements, design, implement, and document functional multifaceted IS networks and to ensure project progress and resolve challenges as they arise
• Researching new technologies to fully understand implementation requirements and implications for integration with other systems
• Developing and implementing network security strategies, architectures, and rulesets to be implemented at the enterprise level
• Performing IS hardening functions and audits of existing network infrastructures including IP addressing, hosted devices, circuit loads, and traffic flows
• Creating and supporting disaster recovery procedures and continuity of operations plans
• Troubleshoot and debugging complex network problems and recommending operational efficiency improvements

Required

• Applicants selected will be subject to a government security investigation and may meet eligibility requirements, including U.S. Citizenship, for access to classified information; the ability to obtain DoD Secret clearance is required
• MS and 0 – 2 years of the following Progressive Experience
• BS and 2 – 4 years of the following Progressive Experience
• Designing, implementing operating and maintaining network security technologies and providing end-user support.
• Knowledge of DoD Regulations, Standards, Policies and Procedures for Information Systems (IS).
• Working knowledge of DoD DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Strong MS Word, MS Excel, MS Visio and Autodesk AutoCAD skills

Preffered

• Cisco Certified Network Associate (CCNA) *OR* CCNA-Security *OR* Juniper Networks Certified Internet Associate (JNCIA)
• DoD IA Workforce Qualifications (DoD 8570.01-M) – Information Assurance Technical (IAT) Level II or higher

Proficient

• Specialized in Enterprise Network Security Architectures: Firewall Architectures, IPS/IDS Architectures, Identify Management, Zero Trust, Break and Inspect, Enterprise WAN/LAN
• Enterprise core services such as DNS, DHCP, NTP, and Directory Services
• Information system (IS) device hardware requirements to include physical space, power & cooling
• Transmission mediums to include copper cabling (Ex. CAT5E, CAT6) and fiber cabling (Ex. OS2, OM3)

Experienced

• Enterprise Class network security Hardware: Cisco NextGen Firewalls (Firepower Threat Defense), Palo Alto Next Generation Firewalls, IPS/IDS (Tipping Point), Packet Brokers, Cisco ISE, F5, and other related DoD enterprise hardware
• 3+ of the following Network Operating Systems (NOS): IOS, IOS-XE, IOS-XR, NX-OS, AireOS, ASA, FTD, Junos OS, PAN-OS, or equivalent
• 1+ of the following Operating Systems (OS): Window Server OS, Linux OS, Unix OS, or equivalent

Knowledge

• Software Defined Networking (SDN) technologies for Access, WAN, & Data Center
• Firewalls, IDS/IPS, VPN, Packet Broker, Load-Balancer technologies
• Voice & Video Collaboration infrastructure and technologies to include Call Manger/Gateway and Endpoints
• Data Center infrastructure, Service Provider infrastructure and/or Security Control infrastructure

Awareness

• Cloud infrastructure, Virtual Server Infrastructure (VSI) and/or Virtual Desktop Infrastructure (VDI)
• Storage Area Network (SAN) infrastructure
• Project management life cycle framework to include Initiation, Planning, Execution and Closure
• Coding languages including Python and Ansible

Abilities

• Exposure to computer screens for an extended period of time
• Sitting for extended periods of time
• Reach by extending hands or arms in any direction
• Have finger dexterity in order to manipulate objects with fingers rather than whole hands or arms, for example, using a keyboard
• Listen to and understand information and ideas presented through spoken words and sentences
• Communicate information and ideas in speaking so others will understand
• Read and understand information and ideas presented in writing
• Apply general rules to specific problems to produce answers that make sense
• Identify and understand the speech of another person