Network Security Engineer III

• Provide network security engineering support to PMS 501/505 and IWS80 for implementation of Cybersecurity Ships Change Documents (SCDs) and Engineering Change Proposal (ECPs).
• Provide engineering and network architecture expertise for pre-delivery/in-service ships for integration and modernization efforts.
• Perform security/vulnerability assessments using DoD provided tools; reporting results to the lead cybersecurity system engineer.
• Provide oversight for the day-to-day management and maintenance of the LCS core network infrastructure.
• Perform firewall and network device support for the TSCE core infrastructure.
• Oversee in the deployment of switches, routers, firewalls, and storage devices from multiple vendors.
• Support and interact with the network cybersecurity engineers, system administrators, and system engineers to ensure the confidentiality, integrity, and availability of systems, networks, and data.
• Assist with network engineering executing activities such as the design, implementation, installation, configuration, maintenance, integration, and analysis.
• Assist in the management and maintenance of lab facilities.
• Apply software patches and patch sets during maintenance windows
• Includes operating system (OS) patches released from DISA's patch repository website.
• Upgrade software.
• Conduct regression testing

• Requires five (5) years with BS/BA or minimum zero (0) to two (2) years with MS/MA/MBA or eight to ten (8 to 10) years with no degree.
• Minimum certification as 461 at the Intermediate level per DoDD 8140.01, or successor
• Information Assurance Technical (IAT) Level II certification
• Minimum of five (5) years' experience in Network Engineering
• Demonstrated experience with Windows OS and Linux OS
• Demonstrated experience with performing STIG implementation
• Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool
• Must have hands-on technical experience in the following areas:
• Network Routing Protocols
• Cisco Adaptive Security Appliance (ASA) Firewalls
• Extensive experience with Access Control Lists (ACLs)
• Experience with Cisco security devices focusing on Identity Services Engine (ISE), Web Security Appliance (WSA) and Email Security Appliance (ESA)
• Demonstrated experience troubleshooting network connectivity issues
• Must have experience in Network Security to include the design, implementation, configuration, and enforcement of security controls on network, hardware, and software components and devices
• Experience with the implementation of cybersecurity and Information Assurance (IA) boundary defense techniques and various IA-enabled appliances (firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention System (IPS), switches/routers
• Knowledge of computing and networking vulnerabilities, attack methods and latest detection methods
• Excellent ability to communicate effectively orally and in writing

• Served on a LCS platform
• Windows Server upgrade experience
• HBSS knowledge is a plus
• Experience utilizing packet analyzer tools such as Wireshark and tcpdump
• Hyper-V or VMware experience is a plus
• Alcatel operating system experience is a plus

• U.S. Citizenship required.
• Candidate must have an ACTIVE SECRET clearance (with TS/SCI eligibility)

Job Snapshot

Employee Type

Location

Job Type

Experience

Date Posted

Job ID