Cyber Security Network Engineer

Job Qualifications

Computer Security, Network Infrastructures, Security Software, System Security, Technical Security

Type of Requisition:
Regular

Clearance Level Must Be Able To Obtain:
Top Secret/SCI

Public Trust/Other

Required:

BI Full 6C (T4)

Job Family:
Cyber and IT Risk Management

Skills:

Computer Security, Network Infrastructures, Security Software, System Security, Technical Security

Certifications:

None

Experience:

8+ years of related experience

US Citizenship

Required:

Yes

Cyber Security Network Engineer – Advanced role focusing on building, designing, testing, and deploying perimeter security systems, including firewalls and proxy devices. Responsible for firewall rule changes, analysis, security recommendations, change control documentation, approval, and implementation.

As a Cyber Network Security Engineer, the work will impact GDIT’s mission, securing network infrastructure used for energy‑related missions local and abroad.

• Manage and support all network security hardware, software, cloud security services, logging analytics and analysis efforts and team members.
• Collaborate with existing Cyber Ops staff members and other OCIO support staff as well as federal management.
• Drive key outcomes and direct how the team innovates, resolves challenges, etc.
• Utilize all Cyber Ops, network and log analytics and analysis tools to keep the customer secure (Examples: Splunk, Palo Alto Networks, Nagios, Syslog tools, etc.).
• Plan, document, and implement hardware and software refresh and upgrade of Palo Alto perimeter devices.
• Conduct periodic firewall rule set review and auditing for standards and use.
• Create and maintain standard operating procedures and guides for new and/or existing perimeter hardware and software.
• Attend weekly teleconferences, onsite meetings, and participate in working groups related to the constantly changing security environment.

• 10+ years of IT network engineering support experience (Tier II, Tier III, network infrastructure implementation and maintenance).
• IPv6 knowledge and implementation experience.
• 3+ years supporting cloud environments such as AWS and Azure with a security specialty and focus.
• Competence with Linux and firewall command line interfaces.
• Expert experience in one or more of the following security devices:
  Palo Alto Firewalls, Cisco ASA/Firepower, Checkpoint, Net Screen.
• Experience supporting the configuration and maintenance of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies.
• Intermediate Linux experience with command line and basic scripting.
• Experience in developing and providing quality assurance review of engineering change orders relating to the replacement or enhancement of perimeter security hardware and software.
• Experience performing root cause analysis, risk identification, and risk mitigation.
• Experience with network monitoring and log analysis applications such as Splunk Enterprise, Splunk Enterprise Security, Nagios, Zenoss, Neural Star, or other similar monitoring tools.
• Clearance level: Q level clearance or equivalent.
• US citizenship required.
• Other role requirements: onsite availability for emergencies, rotating on‑call work.

• Technical training, certification(s), or bachelor’s degree in a computer science/computer engineering related discipline, or 10 years of work experience.

• Certifications:
  
  CISSP, CCNP Security, PCNSE, Network+, Security+, CEH, ITIL® Foundation, AWS Security, AWS Advanced Networking, Linux scripting and programming in Python and/or Perl greatly desired.
• Interpersonal skills include the ability to collaborate effectively, self‑awareness, and excellent written and oral communications.

Exploring a career in cyber at GDIT offers endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.

• AI‑powered career tool that identifies career steps and learning opportunities.
• Internal mobility team focused on helping you achieve your career goals.
• Comprehensive…