Network Engineer/Architect, SME

Description

The company supports DoD and other intelligence agencies worldwide, building mission-critical national security systems for warfighters, DoD leadership and the country.

This senior role covers network architecture, security infrastructure support and hands-on technical expertise for DFAS environments. The focus is keeping network configurations secure, fixing connectivity problems, rolling out Zero Trust technologies and meeting DoD cybersecurity standards.

Responsibilities

• Act as the senior authority on network architecture and security infrastructure across all DFAS enclaves.
• Keep network architecture and configuration design documents current, with 95% compliance.
• Run day-to-day security infrastructure for the entire CCE, including firewalls, IPS/IDS, DNSSEC, reverse and web proxies, and Zero Trust Network Architecture technologies.
• Analyze network traffic and resolve access problems, bringing deep security infrastructure knowledge to each case.
• Build and uphold secure configurations using NSA and DISA STIGs, and apply security patches.
• Act on instructions from DoD CERT during security operations.
• Check secure configurations on a regular schedule using SRRs and security scans with ACAS and MECM.
• Log non-compliance and vulnerabilities through POA&M, AOR or SOL.
• Set up all hardware, software, services and devices to meet DoD and DFAS requirements.

Requirements

• At least 10 years of experience in network engineering and security infrastructure.
• Security X (formerly CASP+) certification showing advanced security skill.
• Deep expertise in network security technologies, including firewalls, IPS/IDS and DNS/DNSSEC.
• Hands-on experience implementing Zero Trust Network Architecture.
• Working proficiency with web proxies, reverse proxies and content filtering.
• Ability to apply and verify NSA and DISA STIG compliance.
• Experience running ACAS vulnerability scans.
• Knowledge of the ports, protocols and services DoD requires.
• Strong skill in network traffic analysis and troubleshooting.
• Preferred: CISSP or CISM certification.
• Preferred: Cisco CCNP Security or an equivalent.
• Preferred: Palo Alto PCNSE certification.
• Preferred: experience with DFAS network infrastructure.
• Preferred: prior experience coordinating with DoD CERT.
• Preferred: Splunk or SIEM administration experience.
• Preferred: experience with classified network architectures such as SIPRNet and JWICS.
• A bachelor's degree in computer science, engineering, information technology or a related field.
• CompTIA SecurityX (CASP) or an equivalent certification.
• An active Top-Secret clearance is required.
• Hold any security clearance or certification the client or FEDITC requires, including those demanded by the client, customer or prime contractor.
• United States citizenship is required to be considered.

Conditions

The company is an equal opportunity employer and makes employment decisions in line with applicable federal, state and local law.