SR. NETWORK/CYBER SECURITY ENGINEER

SENIOR NETWORK/CYBER SECURITY ENGINEER

RICHLAND, WA

US CITIZENSHIP REQUIRED FOR CLEARANCE

POSITION SUMMARY:

We are seeking a results-oriented, self-motivated Tier 3 Network Engineer who will be responsible for securing and maintaining a Local Area Network (LAN)/wide area network (WAN) that interconnects U.S. government field sites. The engineer will deploy and provide ongoing support for Cisco firewalls and Routers and switches. All traffic crossing the WAN must remain encrypted using IPSEC between the routers. Firewall and intrusion prevention policies need to be applied and maintained based on site-specific requirements. This engineer is responsible for the operation of the LAN/WAN and must ensure each change to the environment is clearly documented, to include creating and updating all related engineering documents, drawings, and IP addressing assignments.

QUALIFICATIONS:

Education: Bachelor s degree in Information Technology, or Engineer.

Experience: Ten (10) to fifteen (15)+ years experience; or an equivalent combination of education and work experience. Must have experience with Cisco IOS Routers, Cisco PIX Firewalls, Cisco ASA Firewalls, Cisco Switches, Microsoft Windows, Linux, TCP/IP, VPN, IPSEC, VRF, EIGRP, OSPF, T-1 and T-3. Experience in NIST SP800-30 risk assessments, NIST SP800-53 security controls, FISMA, FIPS, and OMB circular A-130. Minimum CISSP and Cisco CCNA certifications (CCNP or CCIE is preferred).

Required Skills:

The ideal candidate will have experience troubleshooting/isolating network issues and coordinate problem resolution.

The ideal candidate will have experience troubleshooting, implementing, and documenting campus networks built using Cisco network devices (Catalyst 2950/3560/3750/4500/6500 switches, Cisco 2600/2800/3800/7200 Routers running IOS 12.x, and Cisco PIX and ASA 5500-series firewalls).

Must have experience modifying Firewall rule sets, studying network traffic flows to reverse-engineer the required Firewall rules to lock down an application, and troubleshooting Firewall problems in an enterprise or service provider environment under short time constraints involving complex network application flows between multiple hosts spanning multiple firewalls and different geographic locations.

Must have recent hands-on technical experience installing, configuring, documenting, and providing ongoing support for Cisco PIX and/or ASA 5500-series firewalls, and Cisco Routers at multiple customer sites. Must demonstrate a strong understanding of Cisco PIX/ASA 7.x and Cisco IOS 12.x command syntax.

Must have recent experience configuring routing protocols, applying route filters and troubleshooting enterprise WAN and/or service provider Internet edge and backbone Routers running EIGRP and OSPF.

Must have an expert understanding of the TCP/IP stack and 3-5 years experience supporting LAN and WAN networks with hosts running Windows XP, Windows Server 2003 and Linux. Must have a strong understanding of application transport and network infrastructure protocols (SSL/TLS, DNS, DHCP, WINS, NTP, FTP, HTTP, SMTP, CIFS, LDAP, and Microsoft AD) and their relationship to end-user applications.

Must have 1-3 years experience coordinating with Cisco TAC, nation-wide telecommunication carriers, tracking and escalating trouble tickets, and interfacing with customers at all levels.

Must have excellent problem solving skills and a solid understanding troubleshooting connectivity and performance issues involving firewalls, routers, network applications, and WAN circuits (T-1, T-3, OC-3, ISDN, HDLC, ATM, Frame Relay, and MPLS).

Experience configuring and troubleshooting GRE and IPSEC encrypted tunnels between multiple Routers and firewalls is a plus. Experience working with VRF, DMVPN and mGRE preferred

Proficiency with the Perl Scripting language is preferred for automating configuration changes, parsing log data from firewalls and routers, generating reports, detecting network traffic anomalies, etc.

Past experience as a sys-admin for Linux and Windows Servers is a plu.

Excellent understanding of conducting ST&E and completing a C&A package

Solid experience with penetration testing, networking and security, including knowledge of all elements of LAN, WAN and Internet, vulnerability assessments, intrusion detection systems and firewalls

Knowledge of or experience in performing risk assessments, Security Test and Evaluation (ST&E), and other Certification & Accreditation (C&A) activities in accordance with NIST Special Publications 800-30, 800-37, 800-60, 800-53A, 800-53 rev-2, FIPS 199 and related OMB and NIST guidance

Develops system and program-level analysis reports and briefings for federal client management and senior executive personnel

Strong technical, writing, and presentation skills are required

US Citizen (REQUIRED). Must be able to obtain a DOE Q Clearance.