Network Engineer SME (TS/SCI with Poly Required)

GCI Incorporated•Chantilly, VA

8h•$164,382 - $274,518

About The Position

GCI embodies excellence, integrity and professionalism. The employees supporting our customers deliver unique, high-value mission solutions while effectively leverage the technological expertise of our valued workforce to meet critical mission requirements in the areas of Data Analytics and Software Development, Engineering, Targeting and Analysis, Operations, Training, and Cyber Operations. We maximize opportunities for success by building and maintaining trusted and reliable partnerships with our customers and industry. At GCI, we solve the hard problems. As a Network Engineer, a typical day will include the following duties:

Requirements

Demonstrated hands on experience with firewall administration.
Demonstrated experience with Network Access Control.
Demonstrated experience with Access Controls.
Demonstrated experience with VPN tunneling.
Demonstrated experience with endpoint security and mobile emulation environments.
Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.
US Citizen
Active/current TS/SCI with Polygraph clearance

Nice To Haves

Demonstrated experience collaborating with cybersecurity and VDI teams, customer or otherwise.
Demonstrated experience providing training and support.
Demonstrated experience developing and maintaining network and endpoint security policies and procedures.
Demonstrated experience conducting regular security assessments.
Demonstrated experience implementing Zero Trust security model.
Demonstrated experience engaging in continuous improvement related to identifying opportunities for enhancing network and endpoint security measures and implement innovative solutions to improve overall security posture
Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+

Responsibilities

Manage security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement.
Ensure network and endpoint systems are secure, efficient, and compliant.
Manage Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations.
Configure OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment.
Segment networks using VLANs and Access Control Lists in a Zero Trust model.
Implement network segmentation strategies to enhance security and minimize the attack surface.
Oversee endpoint provisioning, patching, and hardening via ManageEngine; to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up-to-date.
Administer Windows 11, Linux, and BlueStacks.
Manage and support endpoint operating systems and Android emulators to ensure they meet performance and security standards.
Enforce GPOs and AD-integrated access controls.
Implement and manage Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions.
Develop and deploy automation scripts to streamline policy enforcement and system management tasks.