Network Engineer/Architect, SME

Description

The company supports DoD and other intelligence agencies worldwide, building national security systems that serve warfighters, DoD leadership and the country.

The team is hiring a senior network engineer and architect to lead network architecture, security infrastructure and technical support for DFAS environments.

The role keeps network configurations secure, resolves connectivity problems and puts Zero Trust technologies into practice while meeting DoD cybersecurity standards.

Responsibilities

• Act as the senior authority on network architecture and security infrastructure across every DFAS enclave.
• Keep architecture and configuration design documents current, with 95% compliance.
• Run day-to-day security infrastructure for the entire CCE, including firewalls, IPS/IDS, DNSSEC, reverse proxies, web proxies and Zero Trust Network Architecture technologies.
• Analyze network traffic and advise on security infrastructure to resolve access problems.
• Apply NSA and DISA STIG configurations and security patches to keep systems secure.
• Act on guidance from DoD CERT for security operations.
• Check secure configurations on a regular schedule using SRRs and security scans with ACAS and MECM.
• Log non-compliance and vulnerabilities through POA&M, AOR or SOL.
• Configure all hardware, software, services and devices to meet DoD and DFAS requirements.

Requirements

• Hold 10+ years of experience in network engineering and security infrastructure.
• Hold the Security X certification (formerly CASP+), showing advanced security skill.
• Have deep knowledge of network security technologies, including firewalls, IPS/IDS and DNS/DNSSEC.
• Have built Zero Trust Network Architecture implementations.
• Be skilled with web proxies, reverse proxies and content filtering.
• Know how to apply NSA and DISA STIGs.
• Have experience running ACAS vulnerability scans.
• Understand DoD port, protocol and service requirements.
• Be strong at diagnosing network traffic and connectivity faults.
• Optional: CISSP or CISM certification.
• Optional: Cisco CCNP Security or an equivalent.
• Optional: Palo Alto PCNSE certification.
• Optional: experience with DFAS network infrastructure.
• Optional: prior experience coordinating with DoD CERT.
• Optional: Splunk or SIEM administration experience.
• Optional: experience with classified network architectures such as SIPRNet and JWICS.
• Hold a bachelor's degree in computer science, engineering, information technology or a related field.
• Hold CompTIA SecurityX (CASP) or an equivalent certification.

Conditions

An active Top Secret/SCI clearance is required, and US citizenship is required to be considered.

Maintain the security clearance and certifications that the client, FEDITC or FEDITC's customers and prime contractors require.

The company is an equal opportunity employer and makes all employment decisions under applicable federal, state and local law.