About Us:
PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group's diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces' awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team. Responsibilities
The selected candidate will support a large Federal agency. Candidates must be located in the United States.
- Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
- Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products
- Configure, deploy, and maintain FortiGate firewalls.
- Create and manage firewall policies, NAT, VIPs, and security rules.
- Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
- Manage FortiManager for centralized firewall administration.
- Monitor security events and logs using FortiAnalyzer.
- Implement network segmentation using VLANs and security zones.
- Troubleshoot firewall, routing, VPN, and connectivity issues.
- Perform firewall rule reviews and remove obsolete or overly permissive rules.
- Develop and maintain firewall/network security documentation.
- Create security reports and dashboards for management or compliance requirements.
- Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
- Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
- Participate in security architecture and network design projects.
- Test firewall policies and security controls after configuration changes.
- Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.
Minimum Qualifications:
To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:
- 7 years of experience with a bachelor's degree or 9 years of total experience
- Proficient in network, routing, and switching.
- Proficient in network scripting
- Proficient with OSI Models Layers 1-7 and network troubleshooting.
- Ability to work in both an individual and team environment
- Flexibility to support after hours maintenance activities
- Must be able to obtain a Position of Public Trust from Dept. of Interior
Preferred Qualifications:
Candidates with these desired skills will be given preferential consideration:
- Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
- Next Generation Firewall Experience, preferably Fortinet.
- Experience support Incident Response (IR) Teams