Network Security Engineer III

Invictus International Consulting, LLC•Alexandria, VA

1d•Onsite

About The Position

This role is responsible for the deployment, configuration, and operational support of enterprise firewall infrastructure. The engineer will execute enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow, and demonstrate LAN and WAN troubleshooting experience. Hands-on experience with eBGP, VLANs, and Palo Alto APP-ID is required. The position involves designing, implementing, and maintaining NGFW security policies for both physical and virtual firewalls, as well as performing IDS/IPS configuration, tuning, and alert triage. The engineer will also be responsible for reading, producing, and maintaining accurate network diagrams, conducting network security monitoring including traffic analysis and anomaly detection, and troubleshooting routing, VLAN, and policy-related issues. Packet captures and traffic analysis will be used to isolate and resolve complex connectivity issues. Collaboration with network, SOC, and engineering teams during incidents and routine operations is expected, along with documenting configurations, runbooks, and post-incident findings.

Requirements

Bachelor's degree from an accredited institute in a technical discipline; an additional four (4) years of experience may be substituted in lieu of a degree
Minimum six (6) years of relevant experience in addition to education level
Hands on experience with eBGP, VLANs, and Palo Alto APP-ID
Must possess current DoD 8570 IAT II and CCNP (or equivalent) certifications
Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Nice To Haves

Experience working in a DoD or Intelligence Community Environment
Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation

Responsibilities

Deployment, configuration, and operational support of enterprise firewall infrastructure
Execute enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow
Demonstrate LAN and WAN troubleshooting experience
Design, implement, and maintain NGFW security policies, including both physical and virtual firewalls
Perform IDS/IPS configuration, tuning, and alert triage
Read, produce, and maintain accurate network diagrams (Visio or equivalent)
Conduct network security monitoring including traffic analysis and anomaly detection
Troubleshoot routing, VLAN, and policy related issues impacting data flow across the enterprise
Perform packet captures and traffic analysis to isolate and resolve complex connectivity issues
Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation
Collaborate with the network, SOC, and engineering teams during incidents and routine operations
Document configurations, runbooks, and post incident findings