Network Security Engineer Subject Matter Expert (SME)

About the position

Concept Solutions, LLC is seeking an experienced and driven Network Security Engineer (SME) to provide expert-level support for a federal law enforcement customer’s enterprise IT infrastructure. This remote role is based out of Clarksburg, WV and plays a critical part in strengthening the customer’s global network security posture through advanced engineering, proactive defense strategies, and seamless integration of security technologies. As a Network Security Engineer SME, you will serve as a key technical advisor responsible for the operation, maintenance, and enhancement of complex network systems, security frameworks, and infrastructure monitoring platforms. Your expertise will guide the secure design and implementation of policies, tools, and protocols across a globally distributed MPLS environment. You will collaborate with federal partners, customer stakeholders, and agile teams to identify and mitigate risks, troubleshoot critical issues, and ensure alignment with federal security standards. This is a fully remote position and contingent hire for an upcoming proposal.

Responsibilities

• Add and manage nodes in Splunk and Riverbed for monitoring purposes.
• Update monitoring tools using Ansible.
• Interact successfully with both program leads and DOJ partners to ensure objectives are completed on-time.
• Manage information technology security, including backups, firewalls, and routers.
• Provide guidance for design and management of information systems security policy, implementation, and management for a globally distributed MPLS infrastructure.
• Provide network security management and support windows servers.
• Resolve routing and Network Address Translation (NAT) issues utilizing tcpdump and other tools.
• Perform system upgrades and implement any new security policies per agency guidance and policy.
• Troubleshoot complex LAN/WAN infrastructure that includes routing protocols BGP, EIGRP and Open Shortest Path First (OSPF), VPNs, web proxy, and XML gateway for enterprise web services.
• Work on different networking concepts and routing protocols like BGP, EIGRP, dynamic multipoint virtual private network (DMVPN) and other LAN/WAN technologies.
• Recommend enterprise information assurance and security standards.
• Develop and implement information assurance/security standards and procedures.
• Coordinate, develop, and evaluate security programs for an organization.
• Recommend information assurance/security solutions to support customers’ requirements.
• Identify, report, and resolve security violations.
• Establish and satisfy information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Support customers at the highest levels in the development and implementation of doctrine and policies.
• Perform a variety of system engineering tasks and activities that are broad in nature and are concerned with major systems design, integration, and implementation.
• Apply know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
• Perform analysis, design, and development of security features for system architectures.
• Analyze and define security requirements for computer systems which may include mainframes, workstations, and personal computers.
• Design, develop, engineer, and implement solutions that meet security requirements.
• Provide integration and implementation of the computer system security solution.
• Analyze complex information assurance-related technical problems and provide multifaceted engineering and technical support in solving these problems.
• Perform vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
• Ensure that all information systems are functional and secure.
• Perform system security tuning, security monitoring, general and privileged user account management, and reviewing all COTS software products upgrades and patches, including operating systems.
• Monitor and perform script writing, storage management interfaces, network interfaces, external peripheral interfaces, and others systems interfacing.
• Design and execute security system tests.
• Support all systems/services certification and Accreditation activities.

Requirements

• Five years of total experience with two years of current experience in supporting and troubleshooting various computing devices and operating systems.
• Strong technical background, CompTIA A+ certified preferred.
• Proficiency in both networking and cybersecurity technologies and protocols.
• Experience in managing and troubleshooting Linux or Unix base operating systems.
• Experience with Application Layer Gateway (ALG) [Real-time Transport Protocol (RTP), Real-Time Streaming Protocol (RTSP) and File Transfer Protocol (FTP), Domain Name System (DNS), Hypertext Transfer Protocol (HTTP)], Dynamic Host Configuration Protocol (DHCP).
• CompTIA Security+ certified, CompTIA Advanced Security Practitioner (CASP+) certified or Cisco Certified Cybersecurity Professional (CCCP) preferred.
• Experience working in an Agile organization using Scrum, XP, Kanban, and SAFe.
• Bachelor’s degree in computer science, information systems, engineering, or a related field is preferred.
• Must be able to obtain and maintain a Top Secret Clearance.

Benefits

• Health, dental, vision and life insurance.
• Comprehensive 401(k) plan with matching and immediate vesting.