Senior Network Security Engineer (Firewall/IPS) - Active Top Secret Required - DOJ NSD

ITC Federal, Inc.•Washington, DC

2d•Onsite

About The Position

ITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment. This is a Full-Time Position; Government contractor supporting DOJ NSD.

Requirements

10+ years of IT experience, required
Mandatory hands-on experience with the following technologies: Cisco Identity Services Engine (ISE) – upgrade, licensing, maintenance, and deployment
Cisco Firepower – upgrade, maintenance, and deployment
Cisco migration from ASA to Firepower Threat Defense (FTD) mode
Cisco 802.1X – ongoing deployment
DMVPN design and deployment, compliant with CNSSP-15
Juniper ADVPN
Good working understanding of the following routing protocols: OSPF
EIGRP
BGP
Active Top Secret, required.

Nice To Haves

Bachelor’s Degree, strongly preferred
CCNP Security – Strongly preferred
CCNP Enterprise (Routing & Switching) – Strongly preferred
CCDP – preferred

Responsibilities

Plans, coordinates, and implements the organization’s information security.
Analyzes requirements and potential solutions for technical and economic feasibility.
Design optimized firewall and IPS rule structure and ensures standards are maintained.
Monitors and maintains health of all firewalls/IPS and recommends improvements.
Develops and maintains documentation of firewall/IPS procedures.
Develops and maintains complex schematics relating to network security.
Researches, evaluates, recommends, designs, tests, and implements new network security technologies.
Displays expert knowledge of current security tools and practices.
Under general guidance, provides support to network engineers.