Network Security Engineer (26-212)

Trace3•Colorado Springs, CO

5d•Onsite

About The Position

The Network Security Engineer will support the program by providing technical expertise in assessing information system compliance with DoD RMF standards. This role focuses on developing secure network device configurations, supporting network upgrades, and ensuring systems are properly hardened and compliant with security requirements.

Requirements

Must be a U.S. Citizen and maintain a valid U.S. passport.
Ability to travel to alternate work locations (e.g., Schriever Space Force Base) to support deployments.
Understanding of OSI Model, TCP/IP, VLANs, and UDP Multicast.
Experience with firewall configuration (e.g., Juniper, Cisco, Palo Alto).
Knowledge of ACL design and function.
Hands-on experience with multi-vendor switching and routing (Juniper, Cisco).
Strong communication skills, including writing and presentation using Microsoft PowerPoint and Visio.
Ability to design security configurations and testing procedures.
Familiarity with NIST CVE framework.
Experience with virtualization technologies.
Ability to work collaboratively in a team environment.
Intermediate knowledge of security design, development, and testing methodologies.
Experience applying DoD security practices, including STIG compliance and system accreditation.
Ability to document project design and development efforts.
Ability to communicate network security requirements and compliance to other departments.
Ability to learn and apply security hardening techniques across various products and applications.
Ability to summarize findings and recommend solutions to leadership.
Understanding of VMware and ESXi STIGing/hardening basics.

Nice To Haves

Scripting experience with Python, Ansible, or PowerShell.
Solid understanding of JUNOS.
Prior experience with the program.

Responsibilities

Assess compliance of information systems with DoD RMF standards, including review, verification, and validation of required documentation and artifacts in accordance with DoDI 8510.01.
Develop cyber-secure configurations for network devices, including firewalls, switches, and routers.
Serve as a primary Network Security Engineer supporting the program.
Plan, deploy, integrate, and test network upgrades at operational sites.
Conduct independent research on networking and security topics and produce reports on findings.
Ensure systems and devices are properly STIGed and hardened.
Execute required cyber protocols to maintain compliance and security standards.
Support real-world events, including work during nights and weekends when required.