Network Security Engineer IV

Invictus International Consulting, LLC•Alexandria, VA

1d•Onsite

About The Position

The Network Security Engineer IV is responsible for the deployment, configuration, and operational support of enterprise firewall infrastructure. This role requires a strong understanding of enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow, as well as demonstrated LAN and WAN troubleshooting experience. The engineer will also be responsible for hands-on experience with eBGP, VLANs, and Palo Alto APP-ID, designing, implementing, and maintaining Next-Generation Firewall (NGFW) security policies for both physical and virtual firewalls. Additionally, the role involves IDS/IPS configuration, tuning, and alert triage, creating and maintaining network diagrams, and performing network security monitoring, including traffic analysis and anomaly detection. Troubleshooting routing, VLAN, and policy-related issues impacting data flow across the enterprise is a key responsibility. The engineer will also perform packet captures and traffic analysis to resolve complex connectivity issues. Monitoring and refining Splunk dashboards and alerts for firewall operations and incident investigation is desired. Collaboration with network, SOC, and engineering teams during incidents and routine operations, and documenting configurations, runbooks, and post-incident findings are also part of the role.

Requirements

Bachelor's degree from an accredited institute in a technical discipline; an additional four (4) years of experience may be substituted in lieu of a degree
Minimum eight (8) years of relevant experience in addition to education level
Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph
Must possess current DoD 8570 IAT II and CCNP (or equivalent) certifications

Nice To Haves

Experience working in a DoD or Intelligence Community Environment

Responsibilities

Deployment, configuration, and operational support of enterprise firewall infrastructure
Execute enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow
Demonstrate LAN and WAN troubleshooting experience
Hands on experience with eBGP, VLANs, and Palo Alto APP-ID
Design, implement, and maintain NGFW security policies, including both physical and virtual firewalls
Perform IDS/IPS configuration, tuning, and alert triage
Read, produce, and maintain accurate network diagrams (Visio or equivalent)
Conduct network security monitoring including traffic analysis and anomaly detection
Troubleshoot routing, VLAN, and policy related issues impacting data flow across the enterprise
Perform packet captures and traffic analysis to isolate and resolve complex connectivity issues
Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation
Collaborate with the network, SOC, and engineering teams during incidents and routine operations
Document configurations, runbooks, and post incident findings