Enterprise Network Security Engineer

Program Description

The contractor shall provide IT Infrastructure support services, which includes Tier 1 Help Desk, Tier 2 End User Support, Tier 3 Server, Platform, and Network Infrastructure Support and Engineering. Services shall include, but are not limited to, technical assistance for hardware, software, and network issues; incident and problem resolution; service request management; infrastructure monitoring and support; hardware and software lifecycle support;

and management of escalation across all tiers.

Manages and maintains NCUA’s Cisco network infrastructure. Oversee the deployment, configuration, and support of Cisco network devices, ensuring optimal performance, security, and availability.

The Network Security Engineer is responsible for managing, maintaining, and modernizing the agency’s enterprise network infrastructure. This includes Cisco-based networking environments, multi-cloud connectivity, perimeter security platforms, and associated monitoring and compliance capabilities. The role ensures performance, availability, security, and alignment with federal networking and logging requirements.

The Network Security Engineer shall be responsible for, but is not limited to, performing the following:

• Install, configure, and maintain network infrastructure components, including Cisco routers, switches, wireless systems, and firewalls.
• Administer network management and monitoring platforms, including Path Solutions and Cisco DNA Center, and maintain operations continuity during transition from Cisco Prime (near-term end of support).
• Manage Palo Alto firewall platforms and services, including PAN-OS, VPN, Prisma Access, and Global Protect, ensuring lifecycle support through end-of-support timelines.
• Perform structured cabling installation and management for copper and fiber infrastructure across sites and colocation facilities.
• Monitor and optimize network performance across enterprise, MPLS, and cloud-connected environments to ensure efficient resource utilization and minimal downtime.
• Diagnose and resolve network issues, including routing, switching, connectivity, latency, and security-related incidents.
• Implement and maintain secure network configurations, including patching, updates, and compliance hardening across on-premises and cloud network environments.
• Support hybrid and multi-cloud connectivity, including Azure Express Route (dual-region connectivity), AWS Direct Connect, and site-to-site redundancy architectures.
• Operate and maintain wide area network (WAN) infrastructure, including dual MPLS circuits per site and high-speed interconnection (e.g., 10G point-to-point links between colocation facilities).
• Support Trusted Internet Connections (TIC) and managed security services, including Lumen MTIPS and Cloudflare-based TIC 3.0 alignment.
• Administer segmented network environments supporting operational systems (e.g., OCSM networks, building systems, access control such as Lenel panels), including associated firewalls and supporting infrastructure.
• Support telecommunications and transition initiatives, including EIS Task Orders (TO) and migration from legacy voice/video systems to Microsoft Teams-based solutions.
• Integrate network telemetry and security monitoring tools, including platforms such as Corelight, Garland, and related SOC enablement technologies.
• Ensure compliance with federal policies and directives, including OMB M-21-31 requirements for event logging and network visibility.
• Maintain and update network documentation, including configurations, standard operating procedures, diagrams, and configuration management artifacts.
• Collaborate with cross-functional IT teams to support system integration, application delivery, and enterprise architecture alignment.
• Respond to network alerts, incidents, and service disruptions, ensuring timely resolution and escalation as required.
• Provide technical support for existing and emerging technologies, including planning and execution of network-related projects and initiatives.
• Conduct research and provide analysis on emerging networking technologies and their applicability to the organization.
• Perform…