Cyber Security Engineer - Illumio SME

The Cyber Security Engineer Illumio SME - provides technical implementation, support, and training services for Illumio on NIPR and SIPR networks. Plans and implements security measures to protect computer systems, networks, and data from loss and service interruptions. Analyzes and documents security risks, breaches, and other cyber security incidents and the damage they cause. Develops and implements a network disaster recovery plan and oversees the monitoring of the computer networks for security issues.

Collaborates with the security team to perform tests and find network weaknesses. Researches and keeps current on the latest IT intelligence technologies, trends, and security standards. Performs work under general supervision. Handles moderately complex issues and problems, and refers more complex issues to higher-level staff. Possesses solid working knowledge of subject matter.

Tasks include but are not limited to:

• Conduct research, documentation, and testing for architecture/system redesign
• Support system transitions and integration into new infrastructure
• Assist throughout the acquisition life cycle
• Support engineering and design for change initiatives
• Provide administration, maintenance, and configuration of infrastructure
• Assist with TCTO development, review, and implementation
• Support Information Assurance (IA) assessments and remediation
• Support AFIN Cyber Operational Readiness Assessments (CORA)
• SMEs may be cross-leveraged across programs as directed by the PMO
• Status updates must be provided in the Monthly Status Report (MSR)
• Post-Deployment Support
• Provide ongoing system administration and maintenance to ensure secure and effective operation of deployed systems to include routine tasks and responsive support, performed locally or remotely as directed.

• User management:
  Administer user accounts and PINs
• System installation:
  Install/reinstall hardware and software per TOs
• System monitoring:
  Oversight of alerts, logs, and performance data
• Troubleshooting & maintenance:
  Diagnose issues, perform backups, and conduct routine maintenance

• Ensure systems meet STIG requirements
• Generate custom/ad-hoc reports and system performance metrics

• Apply TCTOs/FCOs and support integration/test events
• Assist with risk/issue identification and provide advisement to users

• Maintain site-specific system documentation
• Create/update logical and physical network diagrams
• Submit baseline change data to the PMO
• Contractor must travel as directed by the COR
• Must assist in developing or refining network and security procedures
• Software Installation & Configuration
• Install/reinstall/upgrade the Illumio Policy Compute Engine in a secure, approved configuration
• Install/reinstall/upgrade Illumio Virtual Enforcement Nodes across AF servers as directed

• Analyze traffic and create security rules for relevant applications
• Provide project management support and technical advisement to Air Force leadership
• Deliver in-person, Type 1 “over-the-shoulder” training
• Trainers guide trainees through real-time hands-on Illumio operations
• Offer local Tier 3 and Tier 4 support, aligned with IT support level definitions
• Provide ARC Tier 3 support for Illumio suite

• Build and maintain Open Virtualization Appliances (OVAs)
• Maintain cyber posture by testing application upgrades/patches in a lab (ITF) environment
• The ITF should mirror the fielded system to the greatest extent possible
• Validate system functionality post-patch or upgrade
• Support TCTO/TO development and validation

• Maintain Authority to Operate (ATO) status through:
• Applying STIG updates
• Testing and remediating vulnerabilities

• An active DoD Secret clearance is required for consideration
• Bachelor’s Degree; 4+ years of hands-on experience in network engineering and firewall management and 4+ years of experience with cloud networking and virtualization technologies (e.g., VMware).
• Subject matter expert on Illumio micro segmentation to provide consulting to customer throughout integration into its service set
• Expert skills in…