Mid Network Engineer, Insider Threat Program

Location: Lorton, Virginia (Onsite)

Candidates must be comfortable with 100% in-office work and able to obtain and/or maintain a Department of Defense Top Secret clearance with EOD SCI eligibility as a condition and continuation of employment.

About the role

This is an opportunity to support, sustain, design, and evolve the network enterprise for a key government program. The mission is to identify insider threats by utilizing advanced analytics, monitoring, and data correlation to help address and eliminate potential threat actors.

Responsibilities

• Support the program's network infrastructure, perform routine maintenance, and provide guidance on upgrades and system recapitalization.
• Perform availability and capacity management.
• Oversee a cross-domain solution that supports the transfer of data between multiple classification domains.
• Support all documentation to effectively capture the configuration baseline.
• Design and support system recapitalization plans to account for capacity growth and changes.
• Serve as the subject matter expert on all program network infrastructure.

Requirements

• A Bachelor's degree and 4 to 8 years of prior relevant experience or a Master's degree with 4+ years of prior relevant experience.
• Recent hands-on experience with firewalls (Cisco preferred, Palo Alto is acceptable), Solarwinds, and supporting government ATO Audits for certifications. If an applicant has moved into an architect or manager role, they may have no more than 2 years since they performed regular hands-on work in networking and firewalls at a build and support level.
• Cisco Certified Network Professional (CCNP).
• Engineering, deployment, and operations of LAN and WAN Switches and Firewalls.
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, and network topology.
• Installation, configuration, and maintenance of equipment including Cisco network and FW gear (Cisco 2900, 4500, 9300, 9400, 6800, Nexus 9000, Cisco Firepower, ASA).
• Experience managing the information security incident lifecycle.
• Network Management experience with Solarwinds, WhatsUP Gold, NetQoS, or NetBrain.
• Cross-platform familiarity with VMWare, Linux, Microsoft Server, and AD.
• Ability to build firewall policy and optimized rule sets.
• Experience deploying new network configurations to meet NIST/FISMA/STIG compliance requirements.
• Experience supporting ATO reviews and audits.

Preferred Qualifications

• A Master’s degree in IT Management, Engineering, or a related field.
• Proven experience (4 to 8+ years) in IT service delivery management.
• Experience with User Activity Monitoring products and platforms.
• Experience with Everfox High Speed Guard Platform.
• Experience with Cisco and Juniper LAN/WAN network infrastructure.
• Experience with Palo Alto Firewalls.
• Certified Information Systems Security Professional (CISSP).
• Cisco Certified Network Professional (CCNP) - Security.
• Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN-OS 7.0 Version.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program.
• Access to certification prep and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks to associations that include CompTIA and IIBA.
• Dedicated customer service team for consultants and a certified Career Coach.