Network Security Engineer III

Invictus International Consulting, LLC

1d•Onsite

About The Position

Responsible for the deployment, configuration, and operational support of enterprise firewall infrastructure. Execute enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow. Demonstrate LAN and WAN troubleshooting experience. Hands on experience with eBGP, VLANs, and Palo Alto APP-ID. Design, implement, and maintain NGFW security policies, including both physical and virtual firewalls. Perform IDS/IPS configuration, tuning, and alert triage. Read, produce, and maintain accurate network diagrams (Visio or equivalent). Conduct network security monitoring including traffic analysis and anomaly detection. Troubleshoot routing, VLAN, and policy related issues impacting data flow across the enterprise. Perform packet captures and traffic analysis to isolate and resolve complex connectivity issues. Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation desired. Collaborate with the network, SOC, and engineering teams during incidents and routine operations. Document configurations, runbooks, and post incident findings.

Requirements

Bachelor's degree from an accredited institute in a technical discipline; an additional four (4) years of experience may be substituted in lieu of a degree
Minimum six (6) years of relevant experience in addition to education level
Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Nice To Haves

Experience working in a DoD or Intelligence Community Environment
Must possess current DoD 8570 IAT II and CCNP (or equivalent) certifications
Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation

Responsibilities

Deployment, configuration, and operational support of enterprise firewall infrastructure
Execution of enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow
LAN and WAN troubleshooting
Hands on experience with eBGP, VLANs, and Palo Alto APP-ID
Design, implementation, and maintenance of NGFW security policies, including both physical and virtual firewalls
IDS/IPS configuration, tuning, and alert triage
Reading, producing, and maintaining accurate network diagrams (Visio or equivalent)
Network security monitoring including traffic analysis and anomaly detection
Troubleshooting routing, VLAN, and policy related issues impacting data flow across the enterprise
Performing packet captures and traffic analysis to isolate and resolve complex connectivity issues
Monitoring and refining Splunk dashboards and alerts in support of firewall operations and incident investigation
Collaboration with the network, SOC, and engineering teams during incidents and routine operations
Documentation of configurations, runbooks, and post incident findings