Cloud Network Security Engineer, Senior

Booz Allen Hamilton Inc.•Mclean, VA

36d

About The Position

Cloud Network Security Engineer, Senior Key Role: Lead our team of experts and use cutting-edge enterprise cloud platforms to guide your clients as they modernize their IT infrastructure and meet their most challenging missions. Create advanced network security solutions in the cloud that will stand up to even the most advanced cyber threats. Synchronize with fellow cloud architects and engineers specializing in network security solutions to protect our client's most sensitive information in AWS, Azure, and GCP. Research, design, and implement network security solutions to protect our client's most sensitive information in AWS, Azure, and GCP. Coordinate with investment teams, executives, clients, and industry leading vendors to identify the right mix of tools and techniques to translate your customer's goals into a plan that will enable secure and effective cloud hosted solutions. Due to the nature of work performed within this facility, U.S. citizenship is required.

Requirements

5+ years of experience with cloud networking and security in government, public, or private industry
Experience with cloud-native and 3rd party network solutions to protect information hosted across multiple Cloud Service Providers (CSPs), including AWS, Microsoft Azure, and GCP, web application firewalls, and application delivery solutions, in alignment with zero trust architectures
Experience with AWS cloud native network and solutions, including Security Groups and ACLs, VPC, Transit Gateway, VPC FlowLogs, PrivateLink, and Direct Connect
Experience with firewall, network security, or network monitoring solutions, including leading firewall vendors, such as Palo Alto, Juniper, or Aruba
Experience with Git, Terraform, and Ansible for implementing CI/CD pipeline solutions, infrastructure as code, and automation solutions
Knowledge of network security concepts, including packet-capture, intrusion detection, encryption in transit, break-and-inspect, and OWASP
Knowledge of the OSI model, TCP and IP, TLS, FISMA, FedRAMP, PCI, RMF, DoD cybersecurity policies and control frameworks, modern encryption algorithms, IPSec, and TLS
Ability to analyze requirements, design, implement, and operate highly available and scalable firewall and network security solutions in cloud environments
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
HS diploma or GED

Nice To Haves

Experience with software-defined network and WAN solutions
Experience with network monitoring and security solutions for containerization technologies, including Docker, Kubernetes, and OpenShift
Experience with writing proposals, whitepapers, and other technical marketing materials to compete for new business
Ability to develop code or scripts using Python, JavaScript, or other programming languages
IRS Moderate Risk Background Investigation (IRS MBI)
Bachelor's degree in a Mathematics, Science, or Engineering field
Security+, Cisco CCNA, Cisco CCNP, Palo Alto PCNSE, Palo Alto PCNSA, CISSP, AWS, GCP, or Microsoft Azure Certification

Responsibilities

Lead a team of experts.
Use cutting-edge enterprise cloud platforms to guide clients in modernizing IT infrastructure.
Create advanced network security solutions in the cloud.
Synchronize with cloud architects and engineers specializing in network security solutions.
Research, design, and implement network security solutions in AWS, Azure, and GCP.
Coordinate with investment teams, executives, clients, and industry leading vendors.