Network/Boundary Protection Engineer

has an opening for a Tier III Boundary Protection Engineer to support the customer’s various wide area networks (WANs) and local area networks (LANs). This position will provide boundary protection to an enterprise level infrastructure across multiple classifications and act as subject matter experts in boundary technologies across multiple vendors.

The job duties are as follows:

• Maintain the security and networking of enterprise boundary enclaves and devices

• Responsible for installing software, applying patches, managing file systems, and monitoring performance of firewall systems

• Provide support for Palo Alto, Cisco Adaptive Security Appliance (ASA), and Forcepoint firewall equipment and applications

• Generate, determine impact of, and implement custom proxy policies and/or policy exceptions in response to ongoing technology implementation activities on the program

• Proxy Subject Matter Expert (SME) for integration of other technologies within the program (function as an SME on ongoing technology projects)

• Support the troubleshooting of web connectivity problems to determine root cause

• Perform Proxy solution component upgrades, testing and configuration

• Research and develop evidence collection, protection, and analysis techniques for customer owned and maintained hardware and/or software

• Provide real-time monitoring and alerting of security incident investigations on perimeter/internal infrastructure

• Provide day-to-day Operations and Maintenance (O&M) support for all incident management events and outages

• Collaborate with IT staff on projects and initiatives

• Provide input for monthly progress and status reporting of Service Level Agreements (SLAs)

• Work with all corresponding technical support teams as required to resolve network traffic concerns

• Utilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues

Required Clearance: TS/SCI CI

Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years. Additional required qualifications include:

• Candidate must have 7 years of relevant boundary protection experience delivering fault tolerant data network infrastructure solutions and incident response

• Must comply with DoD 8140 Information Assurance Technical (IAT) Level 2.

• Experience in configuring and troubleshooting boundary protection technologies such as Palo Alto, Cisco ASA, and Forcepoint appliances

• Experience with proxy technologies such as Bluecoat proxies or equivalent applications

• Working knowledge or Routing and Networking fundamentals

• Working knowledge of boundary protection best practices

• Understanding of routing, switching, Internet Protocol (IP) subnet, Network Address Translation (NAT) and security technologies

• Demonstrated ability to engineer and modify rulesets to allow connectivity for new customer requirements

• Demonstrated ability to read, understand, and develop schematic diagrams, technical manuals, and documentation such that the supported equipment and software can be maintained with minimal training

• Working knowledge of Service Now or similar IT Service Management (ITSM) products

• Superior verbal and written communication skills

• Intermediate-level knowledge of MS Office products Word, Excel, PowerPoint, and Visio