Boundary Systems Engineer III

• Operate and manage the enterprise boundary management server, ensuring it is functional with duplicate configuration at AFCENT NOSC COOP location.
• Analyze firewall reports, firewall logs, and other metrics and identify sub-standard network performance, and engineer and implement solutions to counter the identified anomalies.
• Operate security devices remotely and locally.
• Create custom UNIX scripts to meet task specific requirements.
• Research, document, and track to resolution all outages, trouble calls, and network intrusions.
• Utilize firewall toolsets to accurately analyze and report on the overall health of local and deployed firewalls.
• Recommend appropriate changes/resolutions in response to the trends analysis.
• Perform enterprise level firewall fault isolation and resolution to include troubleshooting ACLs and Proxies affecting other network traffic; and troubleshoot firewall issues on Open BSD Operating System, including permissions and type-enforcement.
• Configure and maintain DNS and BIND domain name services and manage the full range of the firewall features at an Enterprise level.
• Provide On-the-job training to local help desk personnel and engineers on firewall components and solutions.
• Implement proper backup procedures, walk remote users through backup and restoration actions, and accomplish the same locally.
• Assist engineering new security device implementations.
• Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline.
• Manage proxy servers, internal/external email gateways, and external DNS management.
• Provide guidance and remote administration in the following areas related to Firewall and the Enterprise Manager: General Optimization; VPN connections between firewalls (Point to Point); ACL management; IP Filter management; Log analysis; Installation; Cloning; One-to-many - Failover.
• Provide LAN/WAN support.

5+ years experience in network or systems engineering role. Bachelor’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must be Security+ certified. Must be Network+ or CCNA certified. Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire. Must have firewall and UNIX/Linux experience. Able to implement and enforce local network usage policies and procedures. Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server using server images. Experience with implementation of storage solutions, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. Solid customer service and communication skills are critical as well as the ability and willingness to communicate effectively and appropriately in an empathetic and understanding manner. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.