Senior Network Engineer, Insider Threat Program

Location: Lorton, Virginia (Onsite)

About the role

An opportunity is available for a Senior Network Engineer to support the Insider Threat Program (ITP) for the Department of Homeland Security (DHS). This position involves supporting, sustaining, designing, and evolving the network enterprise of the ITP. The program's mission is to identify insider threats by using advanced analytics, monitoring, and data correlation to help eliminate potential threats.

Responsibilities

• Support the ITP network infrastructure, perform routine maintenance, and provide guidance on upgrades and system recapitalization.
• Perform availability and capacity management for the network infrastructure.
• Oversee a High Speed Guard Cross Domain solution that supports data transfer between multiple classification domains.
• Support all documentation to effectively capture the configuration baseline.
• Design and support system recapitalization plans to account for capacity growth and changes.
• Serve as the subject matter expert on all ITP network infrastructure.

Requirements

• A Bachelor's degree and 8+ years of prior relevant experience or a Master's degree with 6+ years of prior relevant experience.
• Recent hands-on experience with firewalls, with a preference for Cisco, though Palo Alto is also acceptable.
• Experience with Solarwinds and supporting government ATO Audits for certifications.
• Experience in engineering, deployment, and operations of LAN and WAN switches and firewalls.
• Knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, and IT device integrity.
• Experience with the information security incident lifecycle, including response, mitigation, and reporting.
• Network Management experience with tools such as Solarwinds, WhatsUP Gold, NetQoS, or NetBrain.
• Cisco Certified Network Professional (CCNP) certification is required.

Skills

• Installation, configuration, and maintenance of Cisco network and firewall equipment, including Cisco 2900, 4500, 9300, 9400, 6800, Nexus 9000, Cisco Firepower, and ASA.
• Familiarity with VMWare, Linux, Microsoft Server, and Active Directory.
• Ability to build firewall policies and optimized rule sets.
• Experience deploying new network configurations to meet NIST/FISMA/STIG compliance requirements.

Preferred Qualifications

• A Master’s degree in IT Management, Engineering, or a related field.
• 10+ years of experience in IT service delivery management.
• Experience with User Activity Monitoring products and platforms.
• Experience with the Everfox High Speed Guard Platform.
• Experience with Cisco and Juniper LAN/WAN network infrastructure.
• Experience with Palo Alto Firewalls.
• Certified Information Systems Security Professional (CISSP) certification.
• Cisco Certified Network Professional (CCNP) - Security certification.
• Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN-OS 7.0 Version certification.

Candidates must be able to obtain and/or maintain a Department of Defense Top Secret clearance with EOD SCI eligibility as a condition and continuation of employment.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program.
• Access to certification prep and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and other perks to associations that include CompTIA and IIBA.
• Dedicated customer service team for consultants and a certified Career Coach.