T2S Solutions is seeking a Senior CSfC Network Security Engineer to design, configure, integrate, test, and maintain secure network solutions supporting U.S. Army and Department of Defense mission requirements. The ideal candidate will possess extensive experience with enterprise networking, network security, firewalls, VPN gateways, routing, virtualization, Windows and Linux operating systems, and security monitoring technologies. This position will support complex, multi-enclave environments and help develop solutions aligned with National Security Agency Commercial Solutions for Classified (CSfC) and applicable communications-security requirements. The selected candidate must be able to work independently and collaboratively, troubleshoot complex technical issues, communicate effectively with customers and engineering teams, and produce professional architecture, configuration, testing, and operational documentation.
Essential Responsibilities - Design, engineer, integrate, and maintain secure network architectures supporting Commercial Solutions for Classified (CSfC) and U.S. Army communications-security requirements.
- Translate customer mission, security, performance, and operational requirements into executable network designs and technical solutions.
- Design and troubleshoot complex networks supporting multiple security enclaves, classification levels, and trust boundaries.
- Configure, administer, secure, and maintain firewalls, VPN gateways, routers, switches, wireless controllers, intrusion detection systems, and intrusion prevention systems from multiple vendors.
- Configure static and dynamic routing, virtual routing and forwarding (VRF), network segmentation, access-control policies, and encrypted communications.
- Implement and maintain network components from HPE Aruba, Cisco, SonicWALL, Juniper, and other commercial network-equipment vendors.
- Design, configure, and administer VMware-based virtualized environments supporting secure network and cybersecurity services.
- Deploy, harden, administer, and troubleshoot Microsoft Windows and Red Hat Enterprise Linux systems.
- Develop and maintain Bash and PowerShell scripts to automate system configuration, administration, security monitoring, testing, and reporting.
- Configure centralized logging, alerting, dashboards, and event correlation capabilities within a Security Information and Event Management environment.
- Conduct network integration, functional, security, interoperability, performance, and acceptance testing.
- Analyze and resolve complex network, VPN, firewall, routing, operating-system, virtualization, and security-related issues.
- Perform vulnerability assessment, configuration review, system hardening, and remediation in accordance with applicable Government security requirements.
- Support the development and maintenance of CSfC-related architecture, configuration, testing, authorization, and operational documentation.
- Coordinate with Government customers, cybersecurity personnel, system administrators, engineers, vendors, and other stakeholders to resolve requirements and technical issues.
- Develop and maintain network diagrams, architecture drawings, equipment lists, configuration guides, test plans, test reports, standard operating procedures, maintenance instructions, and training materials.
- Provide technical guidance, mentoring, and knowledge transfer to engineers, administrators, operators, and customer representatives.
- Work independently and as part of a multidisciplinary engineering team while managing multiple technical priorities.
- Support laboratory, integration, fielding, troubleshooting, and operational activities at Government and customer locations.
- Travel up to 25% to support technical exchanges, site surveys, installation, integration, testing, training, and operational requirements.
Minimum Qualifications - Bachelor's degree in engineering, computer science, cybersecurity, information technology, or a related technical discipline.
- Five to ten years of progressively responsible experience in enterprise networking, information technology, network engineering, or cybersecurity.
- Expert knowledge of network architecture, routing, switching, firewalls, VPN technologies, wireless networking, network segmentation, and intrusion detection and prevention.
- Practical experience with Windows, RHEL, VMware, PowerShell, and Bash.
- Ability to obtain and maintain a Secret security clearance, with eligibility to obtain a Top Secret clearance if required.
Preferred Qualifications - Experience designing, implementing, testing, or maintaining NSA CSfC solutions.
- Experience supporting DoD or U.S. Army network and cybersecurity environments.
- Relevant certifications such as CISSP, Security+, CEH, CCNA, CCNP, or CCIE..
