Network Engineer/Architect, SME P25-P26

Responsibilities

• Provide senior-level network architecture and security infrastructure expertise for all DFAS enclaves
• Maintain current network architecture and configuration design documentation achieving 95% compliance
• Support Security Infrastructure Operations for entire CCE (Firewalls, IPS/IDS, DNSSEC, Reverse Proxies, Web Proxies, Zero Trust Network Architecture Technologies)
• Provide security infrastructure technical expertise and network analysis for troubleshooting access issues
• Establish and maintain secure configuration through NSA and DISA STIGs and security patches
• Follow directions from DoD CERT for security operations
• Periodically verify secure configuration using SRRs and security scans (ACAS, MECM)
• Report non-compliance and vulnerabilities via POA&M, AOR, or SOL
• Configure all hardware, software, services, and devices for DoD and DFAS compliance

Requirements

• An active Top Secret / SCI (TS/SCI) clearance and United States Citizenship are required to be considered for this position.

Qualifications

• Experience/Skills: 10+ years network engineering and security infrastructure experience
• Security X (formerly CASP+) certification demonstrating advanced security expertise
• Expert knowledge of network security technologies (Firewalls, IPS/IDS, DNS/DNSSEC)
• Experience with Zero Trust Network Architecture implementation
• Proficiency with web proxies, reverse proxies, and content filtering
• Knowledge of NSA and DISA STIG compliance and implementation
• Experience with ACAS vulnerability scanning
• Understanding of DoD ports, protocols, and services requirements
• Network traffic analysis and troubleshooting expertise
• Preferred Qualifications: CISSP or CISM certification, Cisco CCNP Security or equivalent, Palo Alto PCNSE certification, Experience with DFAS network infrastructure, Prior DoD CERT coordination experience, Splunk or SIEM administration experience, Experience with classified network architectures (SIPRNet, JWICS)

Education

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications

• CompTIA SecurityX (CASP) or equivalent

Clearance

• Active Top Secret/SCI clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).