Senior Firewall Engineer

CACI•Springfield, VA

About The Position

As a member of the TCS Network Security Services (NSS) team, you will work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.

Requirements

TS/SCI (current)
Must be able to successfully pass/maintain a U.S. Government Polygraph (post-hire)
BA/BS Degree and typically between Two (2) and Eight (8) years of related technical experience in Network Security with large-scale enterprise/global networks in a high-paced, diverse environment. (Additional experience may be considered instead of a degree.)
DoD 8140.01 and DoD 8570.01-M IAT Level II compliant certification (current)
Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days of start date (post-hire)
Firewalls (e.g. Palo Alto, Juniper, Cisco, etc.)
Routers/Switches (e.g. Juniper, Cisco, etc.)
Intrusion Detection Systems / IDS Products (e.g. FireEye, F5 Load Balancer, Cisco FTD, etc.)
Unix, RHELS OS, Windows Enterprise AD, VMware

Responsibilities

Assist with design, analysis, testing, and implementation of state-of-the-art secure network architectures.
Conduct risk assessment and provide design recommendations.
Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.
Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools).
Oversee the reporting, documentation, and investigation of all security-related incidents; lead the development and implementation of corrective measures.
Develop and execute standard operating procedures (SOPs) for security tools.
Evaluate and report on new network Security technologies to enhance the capabilities of the network.
Act as liaison to the contract and customer management, and government Designated Approving Authority (DAA) regarding network security status, policies, and procedures.