Network/Firewall Engineer [2716]

Minimum Clearance Required to Start:
Not Applicable/None
Job Description:

The ideal candidate will implement equipment installation plans based on the Network Architect's specifications, maintain each component of the network, and troubleshoot issues. The NE will be responsible for monitoring the network firewalls, assessing the functionality of the network components (routers, switches, storage devices, etc.) and ensuring all applicable software/operating systems are updated regularly.

Additionally, the NE will design, develop, and implement networks and components with all applicable security constraints as mandated by the Department of Defense (DoD).

The ideal candidate will have a strong background in Palo Alto firewalls as well as Cloud computing technologies.

Salary
  • Benefits for this position include medical, dental, vision, paid time off, 401k
  • Anticipated compensation range for this position: $110,000 to 130,000 annually

Responsibilities - Essential Functions
  • Expert, authority in discipline typically applies advanced concepts, theories, and principles and contributes toward the development of new principles and concepts
  • Work unusually complex problems with consultative direction
  • Advise top management and customers on advanced technical research studies and applications; managerial/leadership experience or necessary skills
  • Receive little direct supervision and guidance and only in terms of specific work objectives and critical issues
  • Plan, develop/coordinate, and direct a large and important engineering project or several small projects with many complex features
  • Design, configure, integrate, and test networking (monitoring) software, computer hardware, and applicable user applications
  • Implement security systems taken from high level designs with referred technology focus on Palo Alto's suite of security solutions
  • Configure and setup Firewalls, VPN Concentrators, and other Security Appliances
  • Troubleshoot malfunctions of network hardware and software applications, and security systems to resolve operational issues and restore services
  • Replace faulty network hardware components when required
  • Maintain, configure, and monitor virus protection software and/or applicable applications
  • Monitor network performance to determine if adjustments are required
  • Maintain and administer computer networks and related computing environments including systems software, applications software, hardware, and configurations
  • Perform disaster recovery operations and data backups when required
  • Protect data, software, and hardware by coordinating, planning, and implementing network security measures
  • Operate master consoles to monitor the performance of networks and computer systems
  • Any other duties as assigned by management. Non-inclusive examples are assisting with operating systems administration, cybersecurity monitoring, documentation, project oversight

Required Education and Experience
  • Associate degree or 8+ years' experience in Computer Science, Cybersecurity, Information Security, or similar field
  • Bachelor's degree and 4+ years' experience
  • Requirement: Department of Defense Directive (DoDD) 8140 (formerly DoDD 8570) IAT Level 2 Certification must be obtained prior to or within 60 days of hire. ONE of the following certifications fills this requirement:
    Security+ CE Certification

    Red Hat Certified System Administrator (RHCSA)

    Red Hat Certified Engineer (RHCE)

    Microsoft Certified Solutions Associate/Expert (MCSA/MCSE)

    VMware Certified Professional (VCP)
  • Complete all initial and annual training requirements and disclosures as outlined by BSTG.
  • Perform all other duties as required, consistent with the goals, objectives, and responsibilities of the department

Required Skills/Abilities - Competencies
  • High-level knowledge with Cisco/Meraki routers, switches, and firewall on-premises and Cloud Environments
  • SME-level knowledge of building firewalls into AWS (Cloud) or VMware environments
  • Experience designing and building cloud network infrastructure to include Azure Network Security Groups (NSG), Express Route, AWS VPC, and AWS security groups.
  • Experience with SolarWinds, Wireshark, Cisco Firepower, Cisco ASA, Palo-Alto, wireless APs, system virtualization, SANs, and Spunk preferred
  • Familiar with configuration management, quality assurance, and test practices/tools
  • Comprehensive experience in developing and implementing rigorous Engineering processes
  • Excellent oral, written, and graphical communication skills; Strong customer service skills
  • Strong analytical and product management skills required, train junior engineers
  • Proficient in Microsoft Office applications such as Outlook, Word, Excel, and PowerPoint; message distribution/retrieval programs

Preferred Experience and Qualifications
  • Understanding knowledge in Nessus, ACAS, and Security Center; scans, updates, and system troubleshooting
  • Experience hardening Routers, Switches, and Firewalls using DISA Security Technical Implementation Guides (STIGs)
  • Experience working with on-prem and cloud-based platforms (VMware, AWS, Azure)
  • Previous DoD experience
  • Previous experience with DoD classified and unclassified networks

Security Clearance Requirements:
  • Ability to obtain or Active DoD Secret Security Clearance (or used within the past 2 years) or
  • Ability to obtain Top-Secret Clearance
  • US Citizenship is required
The anticipated annualized full time target compensation (median) for this position is: $120,000.00.Benefits for this position include: medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP) and 401K.

86010486