10+ years of network engineering and security infrastructure experience
Security X (formerly CASP+) certification
Expert knowledge of network security technologies (Firewalls, IPS/IDS, DNS/DNSSEC)
Experience with Zero Trust Network Architecture implementation
Proficiency with web proxies, reverse proxies, and content filtering
Knowledge of NSA and DISA STIG compliance and implementation
Experience with ACAS vulnerability scanning
Understanding of DoD ports, protocols, and services requirements
Network traffic analysis and troubleshooting expertise
Responsibilities
Provide senior-level network architecture and security infrastructure expertise for all DFAS enclaves
Maintain current network architecture and configuration design documentation achieving 95% compliance
Support Security Infrastructure Operations for entire CCE including Firewalls, IPS/IDS, and Zero Trust technologies
Provide security infrastructure technical expertise and network analysis for troubleshooting access issues
Establish and maintain secure configuration through NSA and DISA STIGs and security patches
Follow directions from DoD CERT for security operations
Periodically verify secure configuration using SRRs and security scans
Report non-compliance and vulnerabilities via POA&M, AOR, or SOL
Configure all hardware, software, services, and devices for DoD and DFAS compliance
Benefits
Active Top Secret/SCI clearance required
Must be a United States Citizen
Opportunity to work with advanced security technologies
Engagement with DoD security operations
Potential for professional development in a high-security environment
Full Job Description
Overview of position:
We are looking for a Network Engineer/Architect, SME to work in Indianapolis, IN.
An active Top Secret / SCI (TS/SCI) clearance and United States Citizenship are required to be considered for this position.
Responsibilities
Provide senior-level network architecture and security infrastructure expertise for all DFAS enclaves
Maintain current network architecture and configuration design documentation achieving 95% compliance
Support Security Infrastructure Operations for entire CCE (Firewalls, IPS/IDS, DNSSEC, Reverse Proxies, Web Proxies, Zero Trust Network Architecture Technologies)
Provide security infrastructure technical expertise and network analysis for troubleshooting access issues
Establish and maintain secure configuration through NSA and DISA STIGs and security patches
Follow directions from DoD CERT for security operations
Periodically verify secure configuration using SRRs and security scans (ACAS, MECM)
Report non-compliance and vulnerabilities via POA&M, AOR, or SOL
Configure all hardware, software, services, and devices for DoD and DFAS compliance
Experience/Skills:
10+ years network engineering and security infrastructure experience
Security X (formerly CASP+) certification demonstrating advanced security expertise
Expert knowledge of network security technologies (Firewalls, IPS/IDS, DNS/DNSSEC)
Experience with Zero Trust Network Architecture implementation
Proficiency with web proxies, reverse proxies, and content filtering
Knowledge of NSA and DISA STIG compliance and implementation
Experience with ACAS vulnerability scanning
Understanding of DoD ports, protocols, and services requirements
Network traffic analysis and troubleshooting expertise"
Preferred Qualifications:
CISSP or CISM certification
Cisco CCNP Security or equivalent
Palo Alto PCNSE certification
Experience with DFAS network infrastructure
Prior DoD CERT coordination experience
Splunk or SIEM administration experience
Experience with classified network architectures (SIPRNet, JWICS)
Education:
Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field
Certifications:
CompTIA SecurityX (CASP) or equivalent
Clearance:
Active Top Secret/SCI clearance is required.
Must be a United States Citizen and pass a background check.
Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC'S Client(s)/Customer(s)/Prime contractor(s).
