Network Security Engineer

Job Description

Job Description

5 year contract
Must be US citizen or green card holder
Must have 10 years of technical experience in US
Must have certifications stated below

Government Agency is seeking a Network Security Engineer for a 5 year contract. The Network Security Engineer will actively participate in planning and coordinating the design, installation, and connectivity of computer and network systems to ensure stable, scalable, redundant, and secure 24x7 network operations.

• Associate degree.
• Active certifications: (1) Palo Alto Networks Certified Network Security Administrator (PCNSA) Certification or Palo Alto Networks Network Security Professional Certification; (2) Cisco Certified Network Associate (CCNA) Enterprise or CCNA Security Certification.

• Ten (10) years of CONUS (Continental US) technical experience in IT networking and network security.
• Associate’s degree in an Information Technology (IT) related field.
• Certifications that are currently active or expired within three (3) years of proposal submission: (1) Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification or Palo Alto Networks Next-Generation Firewall Engineer Certification or Palo Alto Networks Network Security Analyst Certification; (2) Cisco Certified Network Professional (CCNP) Enterprise or CCNP Security.

• Five (5) years of experience with: (1) Palo Alto Networks next generation firewall services; (2) Intrusion Detection and Prevention with Palo Alto networks; (3) Content Filtering Palo Alto networks; (4) Virtual Private Networks using Palo Alto network systems; (5) Data Loss Prevention; (6) TLS/SSL Inspection.
• Four (4) years of experience in Complex switching, routing, wireless with Cisco Systems.
• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks.
• Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs).
• General experience with the following: (1) Implementing multifactor authentication solutions with Microsoft; (2) Cloud based virtual networking and security services; (3) Authentication standards - (802.1x) in wired and wireless applications; (4) Scalable routing protocols Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP); (5) Enterprise Data Center implementing Micro segmentation; (6) Certificate Management, Public Key Infrastructure (PKI);
  
  (7) Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS; (8) Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps; (9) Centralized Management using Panorama, Solar Winds; (10) Major server and desktop operating systems and utilities.
• Ability to: (1) Work independently, troubleshoot and provide mentoring to junior associates; (2) Communicate effectively when providing presentations; (3) Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required.