[Remote] Sr Migration Network Security Engineer

Note: The job is a remote job and is open to candidates in USA. Telos Corporation is a trusted provider of IT security solutions, and they are seeking a Sr. Migration Network Security Engineer to join their AGUN Migration team. This remote role involves supporting a large and complex network migration and operations for the US Army, ensuring secure network solutions and compliance with DoD standards.

Responsibilities

• Operate and maintain secure network solutions operated as a centralized enterprise capability for the United States Army
• Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide network firewall migration support for the Army global network
• Analyze and understand complex firewall security zones and policies with the ability to transform policies between multiple vendor firewall devices while meeting mission requirements
• Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies
• Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff
• Collect, investigate, and identify network resource management strategies and techniques to meet capacity and performance requirements
• Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture
• Document designs, diagrams, drawings, and technical narratives using wiki technologies and common diagram and drawing tools

Skills

• Minimum of a Bachelor's degree with 12+ years' experience or Master's degree with 10+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree)
• Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start
• Expert understanding of networking and virtualization of firewalls including VSYS in a multi-tenant environment
• Demonstrated experience with networking concepts such as LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and firewalls in a virtualized environment
• Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space
• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation
• Must have experience in working with two or more of the following vendor network technologies: Cisco, Juniper, Palo Alto, Dell, RAVPN, Global Protect, or AppGate
• Experience with the following protocols: SFTP, SSH, SCP, MPLS, SNMP, NTP
• Must be able to work as part of a team to execute troubleshooting and resolve complex network security issues
• Must have excellent written and verbal communication skills
• Must be willing to work non-standard shifts to accomplish network migration objectives and goals
• Must be able to interface with customers
• Must be willing to travel up to 10% of the time
• Must currently possess and be able to maintain an active DoD SECRET security clearance. (US Citizenship required)
• Army/DISA migration experience
• Hands on experience with Palo Alto Next Generation Firewalls (NGFW)
• Knowledge and use of NetSecOps technologies including git, Gitlab CI/CD, Ansible, Terraform, Puppet, and network element managers
• Working knowledge and understanding of Python
• Demonstrate expertise in design and improvement of complex and geographically enterprise networks
• Expert knowledge of US Army security requirements for network infrastructure

Benefits

• Generous paid time off
• Medical
• Dental
• Vision
• Tuition reimbursement
• 401k

Company Overview