Network Engineer (Comply-to-Connect)
About The Position
Transform technology into opportunity as a Comply-to-Connect Engineer with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you’ll be at the forefront of innovation and play a meaningful part in improving how agencies operate. Job Description Summary: Designs and defines Comply-to-Connect security systems for new or existing IT/OT devices. Coordinates system development to include design, modeling, security, integration, and formal testing. Job Description: Deploy, operate, integrate, and maintain the Comply-To-Connect systems, applications, and integrated extended modules (e.g. Microsoft ECM, Microsoft WSUS, McAfee HBSS, Palo Alto NGFW, and Splunk). Apply subject matter knowledge to high level analysis, collection, assessment, design, development, modeling, simulation, integration, installation, documentation, and implementation. Analyze and study complex engineering requirements and develop solutions. Lead major project technical tasks using formal engineering practices and quality control methods. Interpret requirements and design specifications, analyzes alternatives, and creates a solution, and supports integration and testing, as required. Perform highly complex systems design, development, and integration from the start of a systems life cycle to the end. Create, manage, test, and implement user and device profiles and policies. Manage internal cluster identity data stores and user privileges. Configure and assess logging and alerts and provide logs to the Information System Security Officer. Create and optimize customized endpoint remediation checks as needed. Create customized reports, based on administrator-selected attributes/thresholds, to control how and when reports are generated. Create and maintain dashboards and user views to provide appropriate data visibility. Provide training on new dashboards as necessary. Monitor system performance and initiate corrective actions as necessary. Analyze, evaluate and report any potential security violation, intentional or otherwise, to the appropriate authorities. Prepare and submit authorized service interruptions as required for system maintenance or upgrade. Perform approved system patches and upgrades. Ensure system configurations comply with relevant Security Technical Implementation Guides (STIGs), DoD IAVAs, DoD IAVBs, MTOs, CTOs, AF TCNOs, TCTOs, Security Requirements Guides (SRGs), USAF and other applicable DoD directives/policies. Ensure DISA Comply-to-Connect compliance for the currently mandated steps and any re-evaluation of step compliance as guidance changes over time. Troubleshoot and resolve incidents and problems. Prepares and maintains documentation for processes and procedures related to engineering projects. Maintains current knowledge of rapidly changing technology and works with management to evolve current processes. May frequently interact with client staff and may be responsible for directing the activities of assigned technical staff. May be requested to brief key decision makers regarding highly critical and technical information when required.
Requirements
- Cisco Identity Services Engine (ISE)
- DISA STIG
- Endpoint Security
- 5 + years of related experience
- US Citizenship Required
- Minimum/General Experience: This position requires eight years of intensive and progressive specialized experience.
- Required Certifications: DoDD 8570.01 IAT-II (e.g., CompTIA Security+ CE), Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)
- Clearance: Secret TESA eligibility/certification required.
- Minimum Education: A Bachelor’s degree from an accredited college or university with a curriculum or major field of study which is closely related to the work to be automated, and/or in a computer science, information system, a physical science, engineering or a mathematics-intensive discipline.
- Education and experience requirements may be substituted with: A Master’s Degree (in subjects described above) and four years of relevant experience, or No degree and 11 years of directly applicable experience, or An applicable certificate of training with two years undergraduate work can be considered equivalent to a Bachelor’s degree.
Responsibilities
- Deploy, operate, integrate, and maintain the Comply-To-Connect systems, applications, and integrated extended modules (e.g. Microsoft ECM, Microsoft WSUS, McAfee HBSS, Palo Alto NGFW, and Splunk).
- Apply subject matter knowledge to high level analysis, collection, assessment, design, development, modeling, simulation, integration, installation, documentation, and implementation.
- Analyze and study complex engineering requirements and develop solutions.
- Lead major project technical tasks using formal engineering practices and quality control methods.
- Interpret requirements and design specifications, analyzes alternatives, and creates a solution, and supports integration and testing, as required.
- Perform highly complex systems design, development, and integration from the start of a systems life cycle to the end.
- Create, manage, test, and implement user and device profiles and policies.
- Manage internal cluster identity data stores and user privileges.
- Configure and assess logging and alerts and provide logs to the Information System Security Officer.
- Create and optimize customized endpoint remediation checks as needed.
- Create customized reports, based on administrator-selected attributes/thresholds, to control how and when reports are generated.
- Create and maintain dashboards and user views to provide appropriate data visibility.
- Provide training on new dashboards as necessary.
- Monitor system performance and initiate corrective actions as necessary.
- Analyze, evaluate and report any potential security violation, intentional or otherwise, to the appropriate authorities.
- Prepare and submit authorized service interruptions as required for system maintenance or upgrade.
- Perform approved system patches and upgrades.
- Ensure system configurations comply with relevant Security Technical Implementation Guides (STIGs), DoD IAVAs, DoD IAVBs, MTOs, CTOs, AF TCNOs, TCTOs, Security Requirements Guides (SRGs), USAF and other applicable DoD directives/policies.
- Ensure DISA Comply-to-Connect compliance for the currently mandated steps and any re-evaluation of step compliance as guidance changes over time.
- Troubleshoot and resolve incidents and problems.
- Prepares and maintains documentation for processes and procedures related to engineering projects.
- Maintains current knowledge of rapidly changing technology and works with management to evolve current processes.
- May frequently interact with client staff and may be responsible for directing the activities of assigned technical staff.
- May be requested to brief key decision makers regarding highly critical and technical information when required.
Benefits
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay and paid time off
- Full flex work weeks where possible
- Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
