Network Engineer/Architect, SME

Overview of position:

We are looking for a Network Engineer/Architect, SME to work in Indianapolis, IN.

An active Top-Secret clearance and United States Citizenship are required to be considered for this position.

Responsibilities

• Provide senior-level network architecture and security infrastructure expertise for all DFAS enclaves
• Maintain current network architecture and configuration design documentation achieving 95% compliance
• Support Security Infrastructure Operations for entire CCE (Firewalls, IPS/IDS, DNSSEC, Reverse Proxies, Web Proxies, Zero Trust Network Architecture Technologies)
• Provide security infrastructure technical expertise and network analysis for troubleshooting access issues
• Establish and maintain secure configuration through NSA and DISA STIGs and security patches
• Follow directions from DoD CERT for security operations
• Periodically verify secure configuration using SRRs and security scans (ACAS, MECM)
• Report non-compliance and vulnerabilities via POA&M, AOR, or SOL
• Configure all hardware, software, services, and devices for DoD and DFAS compliance

Experience/Skills:

• 10+ years network engineering and security infrastructure experience
• Security X (formerly CASP+) certification demonstrating advanced security expertise
• Expert knowledge of network security technologies (Firewalls, IPS/IDS, DNS/DNSSEC)
• Experience with Zero Trust Network Architecture implementation
• Proficiency with web proxies, reverse proxies, and content filtering
• Knowledge of NSA and DISA STIG compliance and implementation
• Experience with ACAS vulnerability scanning
• Understanding of DoD ports, protocols, and services requirements
• Network traffic analysis and troubleshooting expertise"

Preferred Qualifications:

• CISSP or CISM certification
• Cisco CCNP Security or equivalent
• Palo Alto PCNSE certification
• Experience with DFAS network infrastructure
• Prior DoD CERT coordination experience
• Splunk or SIEM administration experience
• Experience with classified network architectures (SIPRNet, JWICS)

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CompTIA SecurityX (CASP) or equivalent

Clearance:

• Active Top-Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).