Sr. Network Security Engineer

Req : RQ230990

Type of Requisition: Regular

Clearance Level Must Be Able to Obtain: None

Public Trust/Other

Required:

NACI (T1)

Job Family: Cyber and IT Risk Management

Skills:

Cisco ASA Firewall,Cisco Firewall Security,Cisco Identity Services Engine (ISE),Cisco IPS,Cisco NAC

Certifications:

Cisco Certified Network Professional (CCNP) Security | Cisco - Cisco

Experience:

10 + years of related experience

The Senior Network Security Engineer is responsible for the configuration, deployment, and management of the customer’s NAC solution in a 24x7x365 environment. The senior engineer is accountable for but not limited to monitoring, configuration changes, accounts, and software updates for the customer’s NAC, Cisco ISE and IDS/IPS solutions. The engineer must be able to analyze, troubleshoot, and remediate issues within the enterprise.

The engineer will also work closely with other teams to ensure that these solutions are performing to standard.

This position is located at 6555 Rock Spring Drive, Bethesda, MD travel is primarily local in the DC metro area.

• Collaborate in the Architecture and Administration of LAN technologies of Cisco Switches and Cisco ASA Firewalls

• Collaborate in the architecture and Administration of Network Access Control systems including but not limited Cisco ISE, Forescout, Cisco ACS, RSA, Cisco Any Connect, Gigamon, IDS/IPS.

• Troubleshoot and problem solve a wide variety of client/user issues and act as an escalation point for LAN/NAC related issues

• Work closely with other IT functional teams to ensure cohesive support and strategies across the IT organization

• Support the development of project schedules and execute as authorized

• Maintain relationships with key Third-Party software/hardware vendors to provide support to the infrastructure as needed.

• Provide daily support for tickets: service requests, incidents, problems, and tasks

• Execute tasks to support projects

• Provide regular updates to tickets

• Produce daily/weekly status reports

• Develop and execute change request plans

• Identify appropriate security access control solutions to satisfy customer business objectives/requirements

• Develop High-Level Designs (HLDs) and Low-Level Designs (LLDs)

• Document physical and logical topologies for security solutions

• Develop High-Level task lists/Work Breakdown Structure (WBS)

• Determine the Level of Effort (LOE) for service/solutions

• Develop Bills of Materials (BOMs) and participate in the decision-making process for the acquisition of current/new technologies for the customer environment

• Document solution risks, issues and mitigation strategies

• Create and maintain network diagrams

• Provide Subject Matter Expertise for network security technologies

• Meet with management and the customer to present and discuss design and implementation efforts

• BS degree in Computer Science, Information Systems or equivalent.

• Must have a minimum of 10 years of experience implementing and maintaining Network Access Control technologies (Cisco IDS/IPS, ISE, Forescout, Cisco Any Connect, etc.)

• Must have minimum 10 years of experience in a Network Engineering role.

• Experience with network infrastructure in enterprise datacenter solutions.

• Experience with mid to large scale implementations of Network Access Control technologies.

• Ability to obtain/maintain a Public trust which requires background check, fingerprints, etc.

• Cisco CCNA/CCNA/Security, CCNP/CCNP Security, CCIE certifications

• Cisco SISE certification

• Forescout FSCA/FSAA/FSCE certifications

• Experience with Cisco wireless LAN controllers.

• Experience with Forescout security products.

• Experience configuring Cisco ASAs and switches.

• Experience configuring 802.1X.

• Experience configuring and implementing network segmentation…