IS/ Network Security Spec III

• Focusing on user support and operational continuity, ensuring the platform remains available and usable.
• Providing hands-on cyber security support for secure AWS services, enterprise network components, platform operations, mission-owner integrations, service requests, incidents, maintenance activities, and service-restoration efforts
• Evaluating and remediating potential security risks, including cloud, network, host, application, identity, firewall, load-balancing, WAF, certificate-management, and CI and CD pipeline security risks
• Maintaining network diagrams, configuration records, operational runbooks, knowledge articles, technical procedures, and service-support documentation
• Supporting the cyber security monitoring, vulnerability remediation, security-control validation, user support, incident handling, and operational continuity
• Providing operations and customer support for all services, to include, but not limited to:
• Operating System Maintenance
• VPC Configuration
• Cloud Automation Tools
• Amazon Web Services (AWS)
• SCCA Network Components (Cisco Routers and F5 devices)
• SCCA firewall (Palo Alto)
• Identitfying and Access Management - Active Directory (AD)
• Multi-Factor Authentication
• Intrusion Detection and Intrusion Prevention System (IDS/IPS)
• Assured Compliance Assessment Solution (ACAS)
• Microsoft Defender
• Windows Server Update Services (WSUS)
• Online Certificate Status Protocol (OCSP)
• GitLab and CI and CD pipeline network connectivity, access controls, runner connectivity, and DevSecOps infrastructure support
• Cloud and network logging, monitoring, alerting, incident response, vulnerability remediation, configuration management, and continuous compliance activities

• BS degree in Engineering, Physical Science, Physics, Network Security, Computer Science
• Ten (10) years of experience in relevant technical field, to include: Technology Analysis and Assessment, Design Definition, Development of Systems Specification, Systems Analysis, Systems Architecture, Systems/Equipment Integration, Test & Evaluation Criteria
• Experience with cloud automation and infrastructure-as-code tools including Ansible, Terraform, CloudFormation, Lambda, Python, and JSON
• Experience supporting AWS networking including Virtual Private Cloud (VPC), routing, security groups, network access controls, DNS, load balancing, and hybrid-cloud connectivity
• Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), vulnerability management, continuous monitoring, and cyber security compliance
• Experience developing technical documentation, network diagrams, configuration baselines, implementation procedures, operational runbooks, remediation plans, and technical reports
• Ability to identify network and cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• Amazon Web Services (AWS) experience
• Holds a current CompTIA Security+ certification
• Five (5) years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• Desire to work in a secure lab environment
• Team player

Desired Skills

• Network experience
• Experience supporting GitLab, GitLab runners, CI and CD pipeline connectivity, repository access, DevSecOps tooling, and network and security controls for software delivery
• Experience with container networking and container security
• Experience supporting AWS Secure cloud or federal mission environments
• Experience with Assured Compliance Assessment Solution (ACAS), Microsoft Defender, Windows Server Update Services (WSUS), and vulnerability-remediation activities
• SAFe (Scaled Agile Framework) Experience
• Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local) leadership in Information Technology services. Note: Experience may be concurrent

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.