Network Security Engineer

Overview

The Opportunity:

A well-designed secure network is critical to move data and enable the Department of Defense (DoD) to achieve their mission. Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. We are seeking a Network Security Engineer to facilitate the needs of the DoD and help develop a reliable, secure network to support critical missions.

You will collaborate with SMEs, customers, vendors, and users to learn strategic goals and operational needs that shape network requirements. You will share your expertise during the planning of acquisition, installation, configuration, and maintenance of network components. You will resolve interoperability issues across platforms, support the acquisition of hardware, and apply your hardware and software talents to the work. You will design and test new boundary security capabilities in a lab environment and implement tested capabilities into production environments.

You will support implementation teams with remote network firewall and security appliance support. You will identify and support security requirements for switched and routed networks and implement network security best practice configuration and related hardware and software. You will investigate complex client enterprise network deployments, apply leading-edge security principles, theories, and concepts, and contribute to the development of new principles and concepts.

You will work on unusually complex problems, provide innovative solutions, and mentor or supervise employees in both company and technical competencies. You will help secure and protect DoD enterprise networks.

• 5+ years of experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies
• 5+ years of experience with firewall and enterprise security design, including device hardening, intrusion detection and intrusion prevention systems, SIEM, firewalls, IP security, and vulnerability assessment
• Experience with Palo Alto firewalls and Cisco or Juniper firewalls
• Experience with packet analysis tools, including Wireshark
• Experience with monitoring tools and log collectors to perform analysis of traffic
• Experience with boundary protection
• Secret clearance
• HS diploma or GED
• Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date

• Experience designing and implementing Cloud-native and over the top networking in AWS, Azure, or GCP
• Experience with SD-WAN
• Experience with Ansible or Python
• Knowledge of DoD IT and Cloud security policies, including STIGs and DoD Cloud SRG, and how to apply them to the design and implementation of Cloud solutions
• Excellent verbal and written communication skills, including public speaking and prior publications or speaking engagements in industry or vendor forums

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Secret clearance is required.

Salary at Booz Allen is determined by various factors. The projected compensation range for this position is $99,000.00 to $ (annualized USD). This posting will close within 90 days from the Posting Date.