Application Security Engineer

About the role

The Opportunity: Everyone is trying to “harness the cloud,” but not everyone knows how. As a cloud computing infrastructure architect, you know how to take advantage of cloud capabilities. On our team of experienced professionals, you’ll use cutting-edge enterprise cloud platforms to support your clients as they modernize their IT infrastructure and meet their most challenging missions. We’re looking for someone like you to help support national security.

Responsibilities

• Support DoD enterprise architectures
• Design, implement, and administer Palo Alto Next-Generation Firewalls to enable micro-segmentation and identity-aware access controls across complex enterprise environments
• Work with VMware and NSX-T for micro-segmentation, routing, and software-defined networking
• Work with SD-WAN technologies and topologies
• Collaborate with DoD clients and stakeholders to troubleshoot issues in an enterprise architecture
• Use Office 365 applications and Teams for collaboration
• Interact with tools through RDP, web-based UI, SSH, and CLI
• Apply cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
• Understand federal compliance standards, including NIST 800-53, FIPS, DoD STIG, and FedRAMP
• Work with Linux or UNIX environments, including navigating and troubleshooting basic OS issues
• Work with networking protocols

Requirements

• 4+ years of experience supporting DoD enterprise architectures
• 3+ years of experience designing, implementing, and administering Palo Alto Next-Generation Firewalls to enable micro-segmentation and identity-aware access controls across complex enterprise environments
• 3+ years of experience with Palo Alto Next-Generation Firewalls (NGFW), including applying App-ID, User-ID, segmentation policies, and advanced security profiles
• Experience working in DoD IL Clouds or on-premise private cloud environments
• Experience working with VMware and NSX-T for micro-segmentation, routing, and software-defined networking
• Experience working with SD-WAN technologies and topologies
• Secret clearance
• High school diploma or GED

Qualifications

• Nice if you have: Experience working with DoD clients and stakeholders troubleshooting issues in an enterprise architecture
• Experience using Office 365 applications and Teams collaboration
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, DoD STIG, and FedRAMP
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic OS issues
• Knowledge of networking protocols

Skills

• Cloud computing infrastructure architecture
• Palo Alto Next-Generation Firewalls (NGFW) design, implementation, and administration
• Micro-segmentation and identity-aware access controls
• VMware and NSX-T for micro-segmentation, routing, and software-defined networking
• SD-WAN technologies and topologies
• Collaboration with DoD clients and stakeholders
• Office 365 applications and Teams collaboration
• Tools through RDP, web-based UI, SSH, and CLI
• Cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
• Federal compliance standards, including NIST 800-53, FIPS, DoD STIG, and FedRAMP
• Linux or UNIX environments, including navigating and troubleshooting basic OS issues
• Networking protocols

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Pay

The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD).

Schedule

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Individuals selected for this position will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.