Senior Network Security Engineer

Sr. Network Security Engineer

Suitland MD

A Security Engineer is responsible for the daily, weekly, monthly and yearly management, configuration and troubleshooting of the network security devices .
The Sr. Security Engineer is involved in managing the many diverse devices, each with their own challenges and skill sets, and must be able to adapt to the diversity and be fully capable to keep them up-to-date and operational with a minimum of downtime and continue to operate effectively in a manner consistent, with the organizations mission and culture, while demonstrating the understanding of the unique issues related to our services.

Additionally, the Sr. Security Engineer is responsible for the normal day-to-day operational support, i.e. Remedy tickets, emails, phone calls, troubleshooting, morning reports, weekly/bi-weekly reports, monthly reports, metrics, and keeping all devices under our control secure/updated/upgraded. We are also tasked with completing projects deemed urgent or critical, that are assigned to us by the customer.

QUALIFICATIONS FOR THE JOB

Required:

Firewall Services:

– Cisco FTD Next Generation firewalls, Cisco Adaptive Security Appliances (ASAs).
– Extensive experience configuring secure remote access VPNs and VPN client profiles, working with partner organizations to configure site-to-site VPN tunnels.
– Experience racking, installing and configuring new firewall hardware, replacing defective hardware
– Processing firewall policy change requests (modifying Access Control Lists (ACLs) and ACE’s)
– Creating and updating system diagrams and operating procedures
– Reviewing and mitigating compliance and vulnerability scans
– Provide weekly performance metrics
– Provide network documentation and diagrams
– Participate in after hour upgrades, troubleshooting and on-call availability

Core Network Services:

– Design core network services solution based on NIST guidance and Census Information Technology Security Policy.
– Install, configure and manage core network access switches, core distribution switches, and router infrastructure.
– Advanced Layer 2/Layer 3 technologies
– Install, configure, manage data center network switches and routers infrastructure.
– Install, configure, and manage advanced wireless infrastructure which includes Access Points and wireless LAN Controllers.
– Activate and troubleshoot telecommunication Wide Area Network (WAN) circuits.
– Resolve all core network service remedy tickets.
– Identify, diagnose and resolve core network services problems, using available tools.
– Perform patch management for core network services devices.

Create and maintain proper configuration management as it pertains to core network services. Perform daily health checks and monitoring for the core network service infrastructure.

Desired:

Cisco Certified Network Administrator
Routing/Switching
Voice/Wireless
Cisco Certified Network Professional (CCNP) Cisco Certfied Internetwork Engineer (CCIE) Cisco Certified Design Professional (CCDP) A+
Network+ Security + Certified Information Systems Security Professional (CISSP) F5 Training BIG-IP IronPort Palo Alto Next Generation Firewall Certified Network Security Engineer Certification

Experience/Education:

· 10-Years related work experience/ past performance · College Degree or Equivalent CCNP/CCIE/CCDP

Job Types: Full-time, Contract

Pay: $125,000.00 – $135,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Experience level:

• 10 years

Schedule:

• 8 hour shift

Education:

• Bachelor’s (Preferred)

Experience:

• F5 Training: 8 years (Preferred)
• Network +: 8 years (Preferred)

License/Certification:

• CCIE (Required)
• CCNP (Preferred)

Security clearance:

• Secret (Required)

Work Location: One location