Senior Network Security Engineer (Firewall/IPS/COMSEC) - Active Top Secret Required - DOJ NSD

GOVERNMENT AGENCY: DOJ NSD - National Security Division

POSITION INFORMATION: Full-Time Position; Government contractor supporting DOJ NSD

LOCATION: Employee must work onsite at one of the following two approved DOJ work locations - Washington, DC OR Bluemont, VA (Mount Weather)

BENEFITS: Health, Dental and Vision, 401(k), Flexible Spending Account (FSA), 11 Paid Federal Holidays, PTO, education reimbursement

POSITION TIMING: Position requires candidate to be submitted for a DOJ SCI prior to starting employment; SCI process can take 3-6+ weeks to complete.

ITC Federal, LLC is an information technology and consulting company focused on servicing the needs of the Federal Government. ITC's mission is to apply earned expertise in information technology and information assurance/security to assist this client in achieving its mission. ITC is located in Fairfax, VA and offers outstanding compensation and benefits plan and a challenging and rewarding professional work environment.

The mission of the National Security Division (NSD) is to carry out the Department's highest priority: to combat terrorism and other threats to national security. The Infrastructure Support and Software Development Services division provides all IT services necessary to support the NSD's Infrastructure & Operations as well as Software Development, Engineering, and Service Desk.

OVERVIEW:

The mission of the National Security Division (NSD) is to carry out the Department's highest priority: to combat terrorism and other threats to national security. The Infrastructure Support and Software Development Services division provides all IT services necessary to support the NSD's Infrastructure & Operations as well as Software Development, Engineering, and Service Desk.

The Senior Network Security Administrator administers, supports, and maintains network capabilities, including IPS, Firewall and COMSEC.

Provides Tier II and Tier III support of the intrusion protection systems, COMSEC, and network equipment, devices and topologies.
• Plans, coordinates, and implements the organization's information security.
• Analyzes requirements and potential solutions for technical and economic feasibility.
• Design optimized firewall and IPS rule structure and ensures standards are maintained.
• Monitors and maintains health of all firewalls/IPS and recommends improvements.
• Develops and maintains documentation of firewall/IPS procedures.
• Develops and maintains complex schematics relating to network security.
• Researches, evaluates, recommends, designs, tests, and implements new network security technologies.
• Displays expert knowledge of current security tools and practices.
• Under general guidance, provides support to network engineers.
• Implements highly complex networks that typically link numerous computing platforms, operating systems, and network topologies across widely dispersed geographical areas.
• Responsible for the implementation of engineering processes that provide for timely and appropriate integration of all applicable COMSEC requirements.
• Incorporates into the network and COMSEC network all new connections and services as they are required by the customer.
• Prepares test plans and execution or oversight of test execution.
• Prepares all documents required to add, change, or delete services to the NSD network.
• Participates in systems analysis and design definition of the COMSEC network. Identifies impacts on network services, capabilities, and availability as changes in the network configuration are planned and executed including contingency restoration plans, exercise scenarios, and advises management of actions required to mitigate their impact.
• Performs detailed studies of network and COMSEC performance identifying key management parameters that will be used to determine network performance and individual circuit availability rate and to perform trend analysis.
• Serves as a COMSEC expert advising the customer on technology matters.
• Provides functional guidance, technical support, training and quality assurance/quality control to Associate personnel.
• Manages and maintains COMSEC inventory, devices and ensures all NSD and NSA guidelines are met.
• Administers, supports, and maintains network capabilities, including wide area and local area networks.
• Performs operations and support activities.
• Evaluates network changes for operational impact.
• Evaluates network performance and resolves network and connectivity problems.
• Manages local area network performance and troubleshoots problems.
• Maintain Network infrastructure in accordance with STIG guidelines.

• 10+ years of Systems Engineering/Administration experience
• Must have hands on experience on configuration to deployment of Cisco FMC1000 physical and FMC VMware,
• Cisco ISE and IPS products.
• Must have experience managing IPsec VPN, Site-to-Site VPN to Azure cloud.
• Expertise with IPS, COMSEC and Network equipment
• Bachelor's Degree required; advanced degree, preferred
• Infrastructure Certifications, plus

DESIRED:

• Cisco certifications, desired (CCNA, CCNP)

POSITION EDUCATION REQUIREMENTS:

• Bachelor's Degree preferred; can be substituted with an additional 2+ years related experience.

SECURITY CLEARANCE REQUIREMENTS:

• Active Top-Secret clearance with the ability to obtain a DOJ SCI

WORKING ENVIRONMENT:

• Prolonged periods of sitting at a desk and working on a computer.
• Standard office environment; ability to lift 25 pounds.

ITC Federal, LLC, is an equal opportunity/affirmative action employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.