Network Security Engineer

The Opportunity

A well-designed secure network is critical to move data and enable the Department of Defense (DoD) to achieve their mission, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That's why we need a Network Security Engineer like you who knows how to utilize your craft to facilitate the needs of the DoD. As a security engineer on our team, you will work with the DoD to develop a reliable, secure network to support critical missions. You'll collaborate with SMEs, customers, vendors, and users to learn the strategic goals and operational needs that shape network requirements. You'll then share your expertise during the planning of acquisition, installation, configuration, and maintenance of network components. From resolving interoperability issues across platforms, to supporting the acquisition of hardware, you'll put your hardware and software talents to good use. This is your chance to share your experience with backbone networks, cloud technologies, and core networking while broadening your security and network engineering work. You'll dive into challenging hands-on problem-solving, and encounter opportunities to learn new tools and skills. We focus on growing as a team to make the best solutions for our customers.

Responsibilities

• Design and test new boundary security capabilities in a lab environment and implement newly tested boundary security capabilities into production environments.
• Support implementation teams with remote network firewall and security appliance support.
• Identify and support security requirements for switched and routed networks, and implement network security best practice configuration and associated hardware and software.
• Discover and assess complex client enterprise network deployments, apply leading-edge security principles, theories, and concepts, and contribute to the development of new principles and concepts.
• Work on unusually complex problems, provide highly innovative solutions, operate with substantial latitude for unreviewed action or decision, and mentor or supervise employees in both company and technical competencies.

Qualifications

• 5+ years of experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies.
• 3+ years of experience with firewall and enterprise security design, including device hardening, intrusion detection and intrusion prevention systems, SIEM, firewalls, internet protocol security, and vulnerability assessment.
• Experience with Palo Alto firewalls or Cisco or Juniper firewalls.
• Experience with packet analysis tools, including Wireshark.
• Experience with monitoring tools and log collectors to perform analysis of traffic.
• Experience with boundary protection.
• Secret clearance.
• HS diploma or GED.
• Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date.

Preferred Skills

• Experience designing and implementing cloud-native and over-the-top networking in AWS, Azure, or GCP.
• Experience with SD-WAN.
• Experience with Ansible or Python.
• Knowledge of DoD IT and cloud security policies, including STIGs and DoD Cloud SRG, and how to apply them to the design and implementation of cloud solutions.
• Possession of excellent verbal and written communication skills, including public speaking, prior publications, and speaking engagements in industry or vendor forums.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards program for exceptional performance and superior demonstration of values.
• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in benefit programs.
• Salary range: $99,000.00 to $225,000.00 (annualized USD).

Work Model

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.