Network Engineer - Junior/Basic level

Perrygo Consulting Group•Lexington Park, MD

6d•Onsite

About The Position

Perrygo is seeking a junior/basic-level Network Engineer to support a Navy customer in Lexington Park, Maryland. The role supports network security and Information Assurance operations across IT systems and networks, including environments at various classification levels. The position is on-site with situational telework and supports an active, funded contract. A Top Secret security clearance and U.S. citizenship are required.

Requirements

At least three years of networking experience, including experience with one or more of Cisco, Juniper, F5, and Palo Alto.
Three to five years of applicable work experience.
Knowledge of Palo Alto Networks Next Generation Firewall technologies, including firewall configuration, threat prevention, security policy creation, and VPN management.
At least two certifications from Sec+, CASP, JNCIA, CCNA, or equivalent.
Active associate-level network or security certification, such as CCNA.
Must be able to maintain DoD 8140 compliance.
Knowledge of Intrusion Detection/Prevention Systems (IDS/IPS).
Experience with threat and vulnerability management tools.
Top Secret security clearance.
Must be a U.S. citizen.

Nice To Haves

Associate or bachelor's degree preferred.

Responsibilities

Review security monitoring tools and investigate suspicious activity across IT systems and networks for potential signs of compromise and related threat intelligence.
Evaluate and support the ongoing effectiveness of Information Assurance Defense-in-Depth operations and strategies.
Ensure Public Key Infrastructure and other encryption schemes are implemented in accordance with DoD and DON policy.
Identify cybersecurity trends and assess potential risks to mission-essential networks and RDT&E across various classification levels.
Escalate complex or high-impact incidents to senior boundary personnel.
Perform network automated deployment, segmentation, and security using Cisco Catalyst Center.
Conduct network access control for on-site connectivity and RA-VPN connections using Cisco ISE.
Configure NSA Type 1 encryptors, including multicast VLAN mapping and secure transport configurations.
Support multi-vendor network environments, including Cisco, Juniper, Dell, and Brocade/Ruckus equipment.
Use network monitoring and troubleshooting tools such as Wireshark and SolarWinds, as well as cloud networking technologies including VMware NSX.
Maintain and update Infoblox for DNS, DHCP, and IP address management.