Sr. Network Security Engineer

General Dynamics Information Technology•Bethesda, MD

2d•Hybrid

About The Position

The Senior Network Security Engineer configures, deploys, and manages the customer’s Network Access Control (NAC) solution in a 24x7x365 environment. The role is accountable for monitoring, configuration changes, accounts, and software updates for NAC, Cisco ISE, and IDS/IPS solutions, and for analyzing, troubleshooting, and remediating enterprise issues. The engineer works with other teams to ensure solutions perform to standards. The position is based at 6555 Rock Spring Drive in Bethesda, Maryland, with hybrid telecommuting options. The role supports network security and LAN technologies, develops and documents solution designs, provides project and operational support, and advises management and the customer on design and implementation efforts. Travel is listed as none; the description also states that travel is primarily local in the DC metro area.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or equivalent.
At least 10 years of experience implementing and maintaining network access control technologies, such as Cisco IDS/IPS, ISE, Forescout, and Cisco AnyConnect.
At least 10 years of experience in a Network Engineering role.
Experience with network infrastructure in enterprise datacenter solutions.
Experience with mid- to large-scale implementations of network access control technologies.
Ability to obtain and maintain a Public Trust, including completing a background check and fingerprinting.
Skills in Cisco ASA Firewall, Cisco Firewall Security, Cisco Identity Services Engine (ISE), Cisco IPS, and Cisco NAC.

Nice To Haves

Cisco CCNA, CCNA Security, CCNP, CCNP Security, or CCIE certification.
Cisco SISE certification.
Forescout FSCA, FSAA, or FSCE certification.
Experience with Cisco wireless LAN controllers.
Experience with Forescout security products.
Experience configuring Cisco ASAs and switches.
Experience configuring 802.1X.
Experience configuring and implementing network segmentation, including VLANs and MPLS.
Experience with Windows, Linux, Mac OS, and Apple iOS operating systems.
Experience with ServiceNow and Visio.

Responsibilities

Collaborate in the architecture and administration of Cisco switch LAN technologies and Cisco ASA firewalls.
Collaborate in the architecture and administration of network access control systems, including Cisco ISE, Forescout, Cisco ACS, RSA, Cisco AnyConnect, Gigamon, and IDS/IPS.
Troubleshoot and resolve a wide variety of client and user issues, and act as an escalation point for LAN/NAC-related issues.
Work with other IT functional teams to coordinate support and strategies across the IT organization.
Support the development of project schedules and execute work as authorized.
Maintain relationships with third-party software and hardware vendors to support the infrastructure.
Provide daily support for service requests, incidents, problems, and tasks.
Execute project-support tasks and provide regular ticket updates.
Produce daily and weekly status reports.
Develop and execute change request plans.
Identify security access control solutions that meet customer business objectives and requirements.
Develop high-level designs (HLDs) and low-level designs (LLDs).
Document physical and logical topologies for security solutions.
Develop high-level task lists and work breakdown structures (WBS).
Determine level of effort (LOE) for services and solutions.
Develop bills of materials (BOMs) and participate in decisions about acquiring current and new technologies for the customer environment.
Document solution risks, issues, and mitigation strategies.
Create and maintain network diagrams.
Provide subject matter expertise on network security technologies.
Meet with management and the customer to present and discuss design and implementation efforts.