Networking Security Engineer (R-00236)

Job Responsibilities

• Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance.
• Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation.
• Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities.
• Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues.
• Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations.
• Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports.
• Job Qualifications
• Minimum 7 years of relevant network security, network engineering, cybersecurity engineering, or security-tool administration experience.
• Advanced experience with LAN and WAN security, cloud networking, firewall architecture, IDS and IPS, SIEM integrations, CDM tools, network sensors, and security investigations.
• PWS minimum certifications: CompTIA Security+ and Network+; Cisco CCST Networking or Cybersecurity or CCENT; Palo Alto PCCSA; Juniper JNCIA-Junos; and AWS Cloud Practitioner. Active higher-level certifications may support a waiver.
• Preferred certifications include Cisco CCNA or CCNP and AWS Advanced Networking Specialty.
• Demonstrated ability to lead architecture reviews, alternatives analyses, trade studies, root-cause investigations, technology insertion recommendations, policy development, and technical reporting.
• Additional information

Job Qualifications