Boundary Protection Engineer - TS/SCI with Poly Required

The job duties of the Boundary Protection Engineer are as follows:

• Maintain the security and networking of enterprise boundary enclaves and devices

• Responsible for installing software, applying patches, managing file systems, and monitoring performance of firewall systems

• Provide support for Palo Alto, Cisco Adaptive Security Appliance (ASA), and Forcepoint firewall equipment and applications

• Generate, determine impact of, and implement custom proxy policies and/or policy exceptions in response to ongoing technology implementation activities on the program

• Proxy Subject Matter Expert (SME) for integration of other technologies within the program (function as an SME on ongoing technology projects)

• Support the troubleshooting of web connectivity problems to determine root cause

• Perform Proxy solution component upgrades, testing and configuration

• Research and develop evidence collection, protection, and analysis techniques for customer owned and maintained hardware and/or software

• Provide real-time monitoring and alerting of security incident investigations on perimeter/internal infrastructure

• Provide day-to-day Operations and Maintenance (O&M) support for all incident management events and outages

• Collaborate with IT staff on projects and initiatives

• Provide input for monthly progress and status reporting of Service Level Agreements (SLAs)

• Work with all corresponding technical support teams as required to resolve network traffic concerns

• Utilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues

• TS SCI with Polygraph

• Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years. Additional required qualifications include:

• Candidate must have 7 years of relevant boundary protection experience delivering fault tolerant data network infrastructure solutions and incident response

• Must comply with DoD 8570 Information Assurance Technical (IAT) Level 2.

• Experience in configuring and troubleshooting boundary protection technologies such as Palo Alto, Cisco ASA, and Forcepoint appliances

• Experience with proxy technologies such as Bluecoat proxies or equivalent applications

• Working knowledge or Routing and Networking fundamentals

• Working knowledge of boundary protection best practices

• Understanding of routing, switching, Internet Protocol (IP) subnet, Network Address Translation (NAT) and security technologies

• Demonstrated ability to engineer and modify rulesets to allow connectivity for new requirements

• Demonstrated ability to read, understand, and develop schematic diagrams, technical manuals, and documentation such that the supported equipment and software can be maintained with minimal training

• Working knowledge of Service Now or similar IT Service Management (ITSM) products

• Superior verbal and written communication skills

• Intermediate-level knowledge of MS Office products Word, Excel, PowerPoint, and Visio

• Work rotating schedules and after-hours on-call support