Network Security Engineer – Devsecops

Network Security Engineer – Devsecops

Requirements

• US Citizenship required.
• The ability to obtain and maintain a US Government Security Secret Clearance.
• High School /Equivalent Diploma and one or more industry standard certifications supporting the above skillset (CCNA, CCNP, Network+, CISSP, CISM, CASP E, Security+, etc.), OR bachelor’s degree and 2 years of applicable experience.
• 2+ years of experience installing, configuring, and implementing network and infrastructure security devices, including but not limited to Software Defined Network and Firewall infrastructure.
• 2+ years of experience, understanding, and hands on network troubleshooting as it applies to interoperability of security systems with the network.
• 2+ years of experience working with Data Center network migrations, server upgrades, O/S and firmware patching.

Responsibilities

• Assist with architecting network and network security products in secured enclaves, including product testing, validation, and selection.
• Assist with design and long-term roadmap planning for new and future scalability in secure enclaves.
• Play a supporting role with the definition of system security requirements, including but not limited to the authorization boundary, security domains, classification of data, etc.
• Assist with design of the security interfaces, security interconnections, and the trust relationship between system components and external systems.
• Implement system security designs using commercial-off-the-shelf (COTS), government-off-the-shelf (GOTS), and open-source hardware and software.
• Oversee the hardening and configuration systems and system components in accordance with various Federal, Department of Defense (DoD), and Intelligence Community (IC) guidance. Coordinate security assessments to identify security control failures and recommend corrective actions.
• Business travel is required as needed.

Preferred Qualifications

• Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access.
• Bachelor’s degree in systems engineering, cyber security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline.
• Experience with or knowledge of DEVSECOPS Principles and ability to implement and configure Cross Domain Solutions (CDS).
• Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment and NIST 800-171/53 frameworks.
• 2+ years’ experience implementing and configuring Cisco ACI and Arista network infrastructure in a secured enterprise environment.
• Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
• Experience utilizing Ansible as a configuration management tool, for system administration of users or devices, or as a security compliance automation tool.