Network Security Engineer

Position Title & Code: Network Security Engineer

Location: Washington DC, 20020

Project End Date: 03/31/2027 (With Possible extension to next fiscal year)

Duties & Responsibilities:

• Identify network problems and recommend improvements to ensure optimal performance;
• Ability to improve network quality regarding any degradation;
• Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them;
• Ability to ensure reliability and stability of the work through the above actions;
• Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access;
• Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer's level;
• Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user;
• Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe;
• Provide network design services
• Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes;
• Ensure adherence to network policies and procedures;
• Manage production and disaster recovery networks and security
• Ability to perform forensic and packet analysis;
• Ability to configure and operate network security-focused monitoring and logging systems

Qualifications:

• Experience building large scale, multi-site network architectures
• Experience with secure remote access/WAN technologies (IPsec, VPN,
• etc.)
• Knowledge of network-based and system-level attacks and mitigation methods
• Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls;
• Experience with security routing protocols

Technical Skills:

• Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower.

Skill Assessment: (Please include the years of experience last used and brief description on skills below, information is to be submitted along with the resume)