Domain Boundary Compliance; DBCP Engineer

Overview

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title
:
Domain Boundary Compliance (DBCP) Engineer
Location
:
Mclean, VA

The Domain Boundary Compliance Program exists to manage the risk associated with business applications that need to establish network connectivity between dissimilar network segment types by:

• Providing a set of allowable connectivity patterns
• Owning and operating the process for evaluating new connection requests between these dissimilar network segment types
• Processing exception requests for network connection requests that don t fall into the allowable connectivity patterns list

• Ensure policy and configuration changes to network security platforms (initially internet proxy and firewalls) are aligned with enterprise standards, have adequate business justification, and don’t cause unmitigated risks or vulnerabilities before being deployed
• Work with internet proxy platforms. Identify risk categories and threat level for internet access being requested. Maintain proxy policies such as incorporating updates as new categories or threat levels are identified, extend policies as requests are implemented, and performing periodic reviews to ensure policies are not exposing bank to unmitigated risk such as data loss
• Work with IP address management, exception management, document repository, intranet sites, Microsoft Excel, Google Sheets, and other tools fluidly and efficiently
• Verify connection request details against systems of record to ensure they are accurately populated, work with the customer to correct if necessary
• Respond to customer requests for information or help in a timely manner, meet customer response time SLAs
• Work with customers as needed to resolve technical issues and provide guidance for how to proceed with a connection request
• Work with proxy, network, and firewall engineering teams to resolve technical issues and develop solutions for new use cases or connection patterns
• Support exception remediation activities
• Follow documented processes and procedures for processing requests and interacting with customers

• 2 years working with networking concepts including HTTPS, TLS, CIDR notation, RFC 1918 address space
• 2 years of experience with internet proxy platforms such as Broadcom / Symantec and Sophos
• 2 years of experience with firewall platforms such as Checkpoint and Palo Alto
• 1 year of experience with cloud-based network security services such as AWS Security Groups, AWS VPC, Azure Network Security Groups, Azure VNET
• 1 year of experience with firewall audit and compliance tools such as Tufin
• Professional certifications (AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP), CompTIA Security , ISACA CISM)

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.