Network Security Engineer

Network Security Engineer Location: 189 Harry S Truman Parkway, Annapolis, MD 21401 (three days onsite, two days remote)

Interview mode: In person at 187 Harry S Truman Parkway, Annapolis, MD 21401.

10+ years of experience in IT networking and security with expertise in Palo Alto firewalls, Cisco enterprise infrastructure, A10 load balancers, DLP, VPNs, TLS/SSL inspection, NAC (Cisco ISE), MFA, PKI, vulnerability management (Nessus/NMAP), and certifications including PCCSE and CCIE.

Minimum Qualifications

• Ten (10) years of CONUS technical experience in IT networking and network security.

• Bachelor's degree in an Information Technology (IT) related field, as determined by the AOC.

• Current Certifications as follows:

• Prisma Certified Cloud Security Engineer (PCCSE) Certification from Palo Alto Networks

• Cisco Certified Internetwork Expert (CCIE) in Enterprise Infrastructure or Security

• Five (5) years of experience with:

• Palo Alto Networks next generation firewall services.

• Intrusion Detection and Prevention with Palo Alto networks.

• Content Filtering Palo Alto networks.

• Virtual Private Networks using Palo Alto network systems.

• Data Loss Prevention

• TLS/SSL Inspection

• Four (4) years of experience in Complex switching, routing, wireless with Cisco Systems.

• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks.

• Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs).

• General experience with the following:

• Implementing multifactor authentication solutions with Microsoft.

• Cloud based virtual networking and security services

• Authentication standards - (802.1x) in wired and wireless applications.

• Scalable routing protocols Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path Fist (OSPF), and Border Gateway Protocol (BGP).

• Enterprise Data Center implementing Micro segmentation.

• Certificate Management, Public Key Infrastructure (PKI).

• Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS

• Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps.

• Centralized Management using Panorama, SolarWinds.

• Major server and desktop operating systems and utilities

• Ability to:

• To work independently, troubleshoot and provide mentoring to junior associates.

• Communicate effectively when providing presentations.

• Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required.