Network Security Engineer
About the role
A well-designed secure network is critical to move data and enable the Department of Defense (DoD) to achieve their mission. Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need a Network Security Engineer like you who knows how to utilize your craft to facilitate the needs of the DoD.
Responsibilities
- Work with the DoD to develop a reliable, secure network to support critical missions.
- Collaborate with SMEs, customers, vendors, and users to learn the strategic goals and operational needs that shape network requirements.
- Share your expertise during the planning of acquisition, installation, configuration, and maintenance of network components.
- Resolve interoperability issues across platforms, support the acquisition of hardware, and support implementation teams with remote network firewall and security appliance support.
- Identify and support security requirements for switched and routed networks and implement network security best practice configuration and associated hardware and software.
- Discover and assess complex client enterprise network deployments, apply leading-edge security principles, theories, and concepts, and contribute to the development of new principles and concepts.
- Work on unusually complex problems, provide highly innovative solutions, operate with substantial latitude for unreviewed action or decision, and mentor or supervise employees in both company and technical competencies.
- Design and test new boundary security capabilities in a lab environment and implement newly tested boundary security capabilities into production environments.
Requirements
- 5+ years of experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies
- 3+ years of experience with firewall and enterprise security design, including device hardening, intrusion detection and intrusion prevention systems, SIEM, firewalls, internet protocol security, and vulnerability assessment
- Experience with Palo Alto firewalls, Cisco, or Juniper firewalls
- Experience with packet analysis tools, including Wireshark
- Experience with monitoring tools and log collectors to perform analysis of traffic
- Experience with boundary protection
- Secret clearance
- HS diploma or GED
- Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date
Qualifications
- Nice if you have: Experience designing and implementing cloud-native and over-the-top networking in AWS, Azure, or GCP
- Experience with SD-WAN
- Knowledge of DoD IT and cloud security policies, including STIGs and DoD Cloud SRG, and how to apply them to the design and implementation of cloud solutions
- Excellent verbal and written communication skills, including public speaking, prior publications, and speaking engagements in industry or vendor forums
Skills
- Experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies
- Experience with firewall and enterprise security design, including device hardening, intrusion detection and intrusion prevention systems, SIEM, firewalls, internet protocol security, and vulnerability assessment
- Experience with Palo Alto firewalls, Cisco, or Juniper firewalls
- Experience with packet analysis tools, including Wireshark
- Experience with monitoring tools and log collectors to perform analysis of traffic
- Experience with boundary protection
Benefits
- Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.
- Candidates must meet eligibility requirements for access to classified information; Secret clearance is required.
Pay
The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).
Schedule
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role.
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.