Network Security Engineer

$130,000 - $165,000/Yr

ZP Group - Washington, DC

Full-time - Senior

Washington, DC

Professional, Scientific, and Technical Services

About the position

The Senior Network Security Administrator will administer, support, and maintain network capabilities, including Intrusion Protection Systems (IPS), Firewalls, and Communications Security (COMSEC). This role involves providing Tier II and Tier III support, planning and implementing information security measures, and ensuring the health and optimization of network security systems.

Responsibilities

• Provide Tier II and Tier III support for IPS, COMSEC, and network equipment.
• Plan, coordinate, and implement the organization's information security strategies.
• Analyze requirements and potential solutions for technical and economic feasibility.
• Design optimized firewall and IPS rule structures and ensure standards are maintained.
• Monitor and maintain the health of all firewalls/IPS and recommend improvements.
• Develop and maintain documentation of firewall/IPS procedures.
• Develop and maintain complex schematics related to network security.
• Research, evaluate, recommend, design, test, and implement new network security technologies.
• Display expert knowledge of current security tools and practices.
• Provide support to network engineers under general guidance.
• Implement highly complex networks linking numerous computing platforms, operating systems, and network topologies across widely dispersed geographical areas.
• Implement engineering processes for timely and appropriate integration of all applicable COMSEC requirements.
• Incorporate new connections and services into the network and COMSEC network as required by the customer.
• Prepare test plans and oversee test execution.
• Prepare documents required to add, change, or delete services to the NSD network.
• Participate in systems analysis and design definition of the COMSEC network.
• Identify impacts on network services, capabilities, and availability due to network configuration changes, and advise management on mitigation actions.
• Perform detailed studies of network and COMSEC performance, identifying key management parameters for trend analysis.
• Serve as a COMSEC expert advising the customer on technology matters.
• Provide functional guidance, technical support, training, and quality assurance/quality control to Associate personnel.
• Manage and maintain COMSEC inventory and devices, ensuring compliance with NSD and NSA guidelines.
• Administer, support, and maintain network capabilities, including wide area and local area networks.
• Perform operations and support activities.
• Evaluate network changes for operational impact.
• Evaluate network performance and resolve network and connectivity problems.
• Manage local area network performance and troubleshoot problems.
• Maintain network infrastructure in accordance with STIG guidelines.

Requirements

• 10+ years of Systems Engineering/Administration experience.
• Hands-on experience with configuration to deployment of Cisco FMC1000 physical and FMC VMware, Cisco ISE, and IPS products.
• Experience managing IPsec VPN, Site-to-Site VPN to Azure cloud.
• Expertise with IPS, COMSEC, and network equipment.
• Bachelor's Degree required; advanced degree preferred.