Network Engineer (Comply-to-Connect)

General Dynamics Information Technology • Boone, MO

9d • Onsite

About The Position

Transform technology into opportunity as a Comply-to-Connect Engineer with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate. Job Description Summary: Designs and defines Comply-to-Connect security systems for new or existing IT/OT devices. Coordinates system development to include design, modeling, security, integration, and formal testing. Job Description: Deploy, operate, integrate, and maintain the Comply-To-Connect systems, applications, and integrated extended modules (e.g. Microsoft ECM, Microsoft WSUS, McAfee HBSS, Palo Alto NGFW, and Splunk). Apply subject matter knowledge to high level analysis, collection, assessment, design, development, modeling, simulation, integration, installation, documentation, and implementation. Analyze and study complex engineering requirements and develop solutions. Lead major project technical tasks using formal engineering practices and quality control methods. Interpret requirements and design specifications, analyzes alternatives, and creates a solution, and supports integration and testing, as required. Perform highly complex systems design, development, and integration from the start of a systems life cycle to the end. Create, manage, test, and implement user and device profiles and policies. Manage internal cluster identity data stores and user privileges. Configure and assess logging and alerts and provide logs to the Information System Security Officer. Create and optimize customized endpoint remediation checks as needed. Create customized reports, based on administrator-selected attributes/thresholds, to control how and when reports are generated. Create and maintain dashboards and user views to provide appropriate data visibility. Provide training on new dashboards as necessary. Monitor system performance and initiate corrective actions as necessary. Analyze, evaluate and report any potential security violation, intentional or otherwise, to the appropriate authorities. Prepare and submit authorized service interruptions as required for system maintenance or upgrade. Perform approved system patches and upgrades. Ensure system configurations comply with relevant Security Technical Implementation Guides (STIGs), DoD IAVAs, DoD IAVBs, MTOs, CTOs, AF TCNOs, TCTOs, Security Requirements Guides (SRGs), USAF and other applicable DoD directives/policies. Ensure DISA Comply-to-Connect compliance for the currently mandated steps and any re-evaluation of step compliance as guidance changes over time. Troubleshoot and resolve incidents and problems. Prepares and maintains documentation for processes and procedures related to engineering projects. Maintains current knowledge of rapidly changing technology and works with management to evolve current processes. May frequently interact with client staff and may be responsible for directing the activities of assigned technical staff. May be requested to brief key decision makers regarding highly critical and technical information when required.

Requirements

• 5 + years of related experience
• US Citizenship Required
• Minimum/General Experience: This position requires eight years of intensive and progressive specialized experience.
• Required Certifications: DoDD 8570.01 IAT-II (e.g., CompTIA Security+ CE), Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)
• Clearance: Secret TESA eligibility/certification required.
• Minimum Education: A Bachelor’s degree from an accredited college or university with a curriculum or major field of study which is closely related to the work to be automated, and/or in a computer science, information system, a physical science, engineering or a mathematics-intensive discipline.
• Education and experience requirements may be substituted with: A Master’s Degree (in subjects described above) and four years of relevant experience, or No degree and 11 years of directly applicable experience, or An applicable certificate of training with two years undergraduate work can be considered equivalent to a Bachelor’s degree.

Responsibilities

• Deploy, operate, integrate, and maintain the Comply-To-Connect systems, applications, and integrated extended modules (e.g. Microsoft ECM, Microsoft WSUS, McAfee HBSS, Palo Alto NGFW, and Splunk).
• Apply subject matter knowledge to high level analysis, collection, assessment, design, development, modeling, simulation, integration, installation, documentation, and implementation.
• Analyze and study complex engineering requirements and develop solutions.
• Lead major project technical tasks using formal engineering practices and quality control methods.
• Interpret requirements and design specifications, analyzes alternatives, and creates a solution, and supports integration and testing, as required.
• Perform highly complex systems design, development, and integration from the start of a systems life cycle to the end.
• Create, manage, test, and implement user and device profiles and policies.
• Manage internal cluster identity data stores and user privileges.
• Configure and assess logging and alerts and provide logs to the Information System Security Officer.
• Create and optimize customized endpoint remediation checks as needed.
• Create customized reports, based on administrator-selected attributes/thresholds, to control how and when reports are generated.
• Create and maintain dashboards and user views to provide appropriate data visibility.
• Provide training on new dashboards as necessary.
• Monitor system performance and initiate corrective actions as necessary.
• Analyze, evaluate and report any potential security violation, intentional or otherwise, to the appropriate authorities.
• Prepare and submit authorized service interruptions as required for system maintenance or upgrade.
• Perform approved system patches and upgrades.
• Ensure system configurations comply with relevant Security Technical Implementation Guides (STIGs), DoD IAVAs, DoD IAVBs, MTOs, CTOs, AF TCNOs, TCTOs, Security Requirements Guides (SRGs), USAF and other applicable DoD directives/policies.
• Ensure DISA Comply-to-Connect compliance for the currently mandated steps and any re-evaluation of step compliance as guidance changes over time.
• Troubleshoot and resolve incidents and problems.
• Prepares and maintains documentation for processes and procedures related to engineering projects.
• Maintains current knowledge of rapidly changing technology and works with management to evolve current processes.
• May frequently interact with client staff and may be responsible for directing the activities of assigned technical staff.
• May be requested to brief key decision makers regarding highly critical and technical information when required.

Benefits

• Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level