Network Engineer with Security Clearance

Network Engineer
Lorton, VA
Top Secret/SCI The Digital Modernization Sector has an opening for a Mid-Level Network Engineer supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the network enterprise of the ITP.

The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland. The selected candidate will be responsible for the following:
1. Support the ITP network infrastructure, perform all routine maintenance activities, provide guidance on upgrades and system recapitalization, perform availability/capacity management.
2.

Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains.
3. Support all documentation to effectively capture the configuration baseline.
4. Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer.
5. Serve as the subject matter expert on all ITP network infrastructure.

Basic Qualifications

• Bachelors degree and (4)+ years of prior relevant experience or Masters with (3)+ years of prior relevant experience
• Cisco Certified Network Professional (CCNP)
• Engineering, Deployment and operations of LAN and WAN Switches, and Firewalls ensuring seamless integration into existing network infrastructure
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
• Installs, configures, and maintain equipment including Cisco network and FW gear Cisco 2900, 4500, 9300, 9400, 6800 and Nexus 9000, and Cisco Firepower, ASA.
• Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, post-action reporting, and mapping a path forward.
• Network Management experience with Solarwinds, or WhatsUP Gold, NetQoS, NetBrain
• Cross platform familiarity and experience with VMWARE, Linux, Microsoft Server and AD.
• Build firewall policy and optimized rule sets for improved efficiency and threat prevention.
• Deploy new network configuration to meet NIST/FISMA/STIG compliance requirements
• Support ATO reviews and Audits
• Ability to obtain DHS EOD SCI Preferred Qualifications:
• Master’s degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (6+ years) in IT service delivery management
• Experience with User Activity Monitoring products and platforms
• Experience with Everfox High Speed Guard Platform
• Experience with Cisco, Juniper LAN/WAN network infrastructure
• Experience with Palo Alto Firewalls
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Network Professional (CCNP)
• Security
• Palo Alto Networks Accredited Configuration Engineer (ACE)
• PAN-OS 7.0 Version