Boundary Systems Engineer III

Responsibilities

• Operate and manage the enterprise boundary management server, ensuring it is functional with duplicate configuration at AFCENT NOSC COOP location.
• Analyze firewall reports, firewall logs, and other metrics and identify sub-standard network performance, and engineer and implement solutions to counter the identified anomalies.
• Operate security devices remotely and locally.
• Create custom UNIX scripts to meet task specific requirements.
• Research, document, and track to resolution all outages, trouble calls, and network intrusions.
• Utilize firewall toolsets to accurately analyze and report on the overall health of local and deployed firewalls.
• Recommend appropriate changes/resolutions in response to the trends analysis.
• Perform enterprise level firewall fault isolation and resolution to include troubleshooting ACLs and Proxies affecting other network traffic; and troubleshoot firewall issues on Open BSD Operating System, including permissions and type-enforcement.
• Configure and maintain DNS and BIND domain name services and manage the full range of the firewall features at an Enterprise level.
• Provide On-the-job training to local help desk personnel and engineers on firewall components and solutions.
• Implement proper backup procedures, walk remote users through backup and restoration actions, and accomplish the same locally.
• Assist engineering new security device implementations.
• Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading and deployment of enterprise datacenter hardware and software using a project-based timeline.
• Manage proxy servers, internal/external email gateways, and external DNS management.
• Provide guidance and remote administration in the following areas related to Firewall and the Enterprise Manager: General Optimization; VPN connections between firewalls (Point to Point); ACL management; IP Filter management; Log analysis; Installation; Cloning; One-to-many – Failover.
• Provide LAN/WAN support.

Qualifications

• 5+ years experience in network or systems engineering role.
• Bachelor’s degree in a related field.
• Must be Security+ certified.
• Must be Network+ or CCNA certified.
• Must hold the ITIL v5 Foundations certification or be able to obtain the certification within 60 days of hire.
• Must have firewall and UNIX/Linux experience.
• Experience with enterprise level network architectures and configurations.
• Able to assess infrastructure, identify areas for improvement, and recommend solutions.
• Experience with network monitoring and management using an automated solution.
• Solid customer service and communication skills are critical as well as the ability and willingness to communicate effectively and appropriately in an empathetic and understanding manner.
• Must be a US Citizen and hold a current Secret clearance.