Windows System Engineer | Secret Clearance Required

Our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients' success. You'll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses. Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation.
Work You'll Do

The client builds and maintains sustainable facilities, delivers utilities, and services, and provides expeditionary combat force capabilities. The client requires facilities under its command and the facility related controls systems (FRCS) in them to be interconnected to properly provide Technical Management, Continuous Monitoring, and an End-to-End (E2E) Cyber Defense capabilities to the client's Facilities Engineering Commands. The Control Systems Platform Enclave version 3 (CSPEv3) has been identified as the networking platform these systems will connect to and requires location specific integration for each of the designated control systems that will be connected.

We are seeking a skilled and experienced Systems Engineer to join our Network Operations Center (NOC) team. The primary job of the CSPEv3 support team is to integrate key locations into the CSPEv3 infrastructure by standing up all technologies, both software and hardware, to integrate FRCS systems into this network topology with an end goal of creating connectivity to enable continuous monitoring of critical systems.

Desired Skills

• Expertise in designing, deploying, and configuring ACAS

• Expertise in designing, deploying, and configuring ESS

• Knowledge of Windows Server and client devices

• Experience with configuring and designing Active Directory infrastructure

• Experience hardening assets and implementing Security Technical Implementation Guidelines (STIGs)

• Ability to manage firewall policies, rules, security zones, and access controls.

• Experience in planning and performing firmware updates, patches, and software upgrades.

• Knowledge of Zero Trust principles, compliance requirements, and security best practices.

• Collaboration skills with network engineers and system engineers for configuration alignment.

• Strong understanding of network security principles, Zero Trust architectures, and compliance requirements.

• Experience with automation tools (e.g., Python, Ansible)

The Team

Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks and AI infrastructure from the core to the edge, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications

Required:

• Bachelor's degree or equivalent experience

• 5+ years of experience in Security Engineering with relevant technology

• 5+ years of experience in configuring and managing Palo Alto Next-Generation Firewalls (physical and virtual) and Panorama

• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

• Active Secret security clearance required

• Ability to be located in Norfolk, VA 3-5x per week

Preferred:

• Experience with virtual Palo Alto Firewalls as a service in VMware NSX environments

• One of the following certifications: ACAS, ESS, CISSP, PCNSE

Information for applicants with a need for accommodation: