Network Security Engineer
On-siteChantilly, Virginia, United States
Job Summary
Perform Tier II and Tier III network security engineering support while assisting in designing advanced WAN, LAN, and data center solutions. Monitor and configure networks utilizing SolarWinds, Cisco Firepower FMC, and Cisco ISE to analyze complex requirements and ensure functioning infrastructure. Create, maintain, and interpret detailed technical network security diagrams, routing topology schemas, and hardware configuration baselines. Coordinate across internal teams and stakeholders to drive infrastructure agendas and navigate systems engineering processes. Participate in all phases of the ITIL Service Lifecycle, including submitting Change Requests and maintaining security event monitoring policies. Evaluate current architectures and recommend process improvements to optimize performance. Deliver end-to-end functional analysis, requirements specification, and engineering package releases for customer production IT environments. Requires TS/SCI clearance and onsite work in Chantilly, VA.
Required Qualifications
- 7+ years of progressively responsible experience in Network Security Engineering, Network Analysis, or a related technical discipline
- Cisco Certified Network Associate (CCNA) certification, or equivalent routing/switching technical certification, ex., Juniper Networks Certified Associate – Junos (JNCIA-Junos)
- DoD 8570 IAT Level II Certification, e.g., Security+
- DoD 8570.1 / DoD 8140.01 (IAT III Level) certification
- current and active TS/SCI clearance
- Must be able to remain in a stationary position 50% of the time
Desired Qualifications
- Bachelors degree in an engineering discipline
- Experience using and administering SolarWinds alongside deep knowledge of Microsoft Windows Systems, HP SANs, and VMware products
- Advanced experience managing VPNs, GRE tunnels, routing protocols (BGP E/I, OSPF), VLANs, VRFs, and configuring KGs
- Strong familiarity with Cisco ACI, data center fabric best practices, Ansible, and Desired State Configuration (DSC)
- Strong familiarity with Cisco Secure Firewall ( Firepower FMC)
- Practical knowledge of BICSI standards, terminating fiber and Cat 5 cabling, as well as familiarity with NSTISSAM TEMPEST/2-95 and CNSSAM TEMPEST/01-13 guidelines
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.