| Location | Lorton, VA |
| Job Type | Contractor |
| Salary | $110–$115 Per Hour |
JOB TITLE: SR NETWORK ENGINEER
JOB LOCATION: LORTON, VA
WAGE RANGE*: 110.00-115.00 PER HOUR
JOB NUMBER: SAIJP00039034
JOB DESCRIPTION:
Senior Network Engineer supporting the HEITS Contract as part of the Department of Homeland Security (Client) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the network enterprise of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the Client mission in safeguarding the homeland.
The selected candidate will be responsible for the following: Support the ITP network infrastructure, perform all routine maintenance activities, provide guidance on upgrades and system recapitalization, perform availability/capacity management.
Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains.
Support all documentation to effectively capture the configuration baseline.
Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer.
Serve as the subject matter expert on all ITP network infrastructure.
Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities
* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCM's discretion.
REQUIRED EXPERIENCE:
Bachelors degree and (8)+ years of prior relevant experience or Masters with (6)+ years of prior relevant experience
Cisco Certified Network Professional (CCNP)
Requires a TS/SCI Clearance
Engineering, Deployment and operations of LAN and WAN Switches, and Firewalls ensuring seamless integration into existing network infrastructure
Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
Installs, configures, and maintain equipment including Cisco network and FW gear Cisco 2900, 4500, 9300, 9400, 6800 and Nexus 9000, and Cisco Firepower, ASA.
Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, post-action reporting, and mapping a path forward.
Network Management experience with Solarwinds, or WhatsUP Gold, NetQoS, NetBrain
Cross platform familiarity and experience with VMWARE, Linux, Microsoft Server and AD.
Build firewall policy and optimized rule sets for improved efficiency and threat prevention.
Deploy new network configuration to meet NIST/FISMA/STIG compliance requirements
Support ATO reviews and Audits
Ability to obtain Client EOD SCI
Preferred Qualifications:
Master's degree from an accredited college or university in IT Management, Engineering, or related field
Proven experience (10+ years) in IT service delivery management
Experience with User Activity Monitoring products and platforms
Experience with Everfox High Speed Guard Platform
Experience with Cisco, Juniper LAN/WAN network infrastructure
Experience with Palo Alto Firewalls
Certified Information Systems Security Professional (CISSP)
Cisco Certified Network Professional (CCNP) - Security
Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN-OS 7.0 Version