Boundary Systems Engineer

SMS Data Products Group, Inc.; Sumter (SC); On-site; USD 90,000 - 120,000; Full time

Job summary

SMS Data Products Group, Inc. seeks Boundary Systems Engineers to support the AFCENT NOSC contract at Shaw AFB. The role focuses on 24/7 enterprise network operations, firewall management, and security device implementations to protect critical DoD networks.

The position requires a BS in a related field with 5+ years IT experience (or 7+ years), firewall/Unix/Linux expertise, and DoD Secret clearance eligibility. On-site work at Shaw AFB is expected.

Qualifications

• B.S. in related field with 5+ years IT experience or 7+ years total.
• Firewall and Unix/Linux experience required.
• Experience installing Windows Server in host/compute environments.
• Storage, DNS, DHCP, remote access, and core network solutions experience.

Responsibilities

• Operate and manage enterprise boundary management server with redundant configuration.
• Analyze firewall logs and metrics; engineer solutions to network anomalies.
• Operate security devices remotely and locally.
• Create UNIX scripts to meet task requirements.
• Document outages, trouble calls, and intrusions; track to resolution.
• Analyze firewall health using toolsets and recommend changes.
• Troubleshoot ACLs/Proxies and OpenBSD permissions.
• Configure and maintain DNS/BIND and enterprise firewall features.
• Provide on-the-job training to local staff on firewall components.
• Assist with new security device implementations and upgrades.
• Plan and deploy datacenter hardware/software with project timelines.
• Manage proxies, mail gateways, and external DNS management.

Skills

Firewall expertise

Unix/Linux

Windows Server

Network policy enforcement

DNS/DHCP

OpenBSD

Scripting

Education

B.S. in related field

CompTIA Network+CE

CCNA

ITIL Foundation

DoD Secret clearance

Tools

DNS (BIND)

Firewall toolsets

OpenBSD

Scripting (UNIX)

Job description

SMS is seeking talented Boundary Systems Engineers to support our AFCENT NOSC contract at Shaw Air Force Base. The AFCENT's mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT's theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Job Responsibilities

• Operate and manage the enterprise boundary management server, ensuring it is functional with duplicate configuration.
• Analyze firewall reports, firewall logs, and other metrics and identify sub-standard network performance, and engineer and implement solutions to counter the identified anomalies.
• Operate security devices remotely and locally.
• Create custom UNIX scripts to meet task-specific requirements.
• Research, document, and track to resolution all outages, trouble calls, and network intrusions.
• Utilize firewall toolsets to accurately analyze and report on the overall health of local and deployed firewalls. Recommend appropriate changes/resolutions in response to the trend analysis.
• Perform enterprise-level firewall fault isolation and resolution to include troubleshooting ACLs and Proxies affecting other network traffic; and troubleshoot firewall issues on OpenBSD Operating System, including permissions and type enforcement.
• Configure and maintain DNS and BIND domain name services and manage the full range of firewall features at an Enterprise level.
• Provide On-the-job training to local help desk personnel and engineers on firewall components and solutions.
• Implement proper backup procedures, walk remote users through backup and restoration actions, and accomplish the same locally.
• Assist with engineering new security device implementations.
• Perform analysis for collaboration of network/system needs and participate in planning, designing, upgrading, and deployment of enterprise datacenter hardware and software using a project-based timeline.
• Manage proxy servers, internal/external email gateways, and external DNS management.
• Provide General IT Management support.
• Provide General Networking support.
• Provide LAN support.
• Provide WAN Enterprise support.
• Provide technical and general O&M support as required.
• Provide documentation/reports support as required.
• Provide meetings/briefings support as required.
• Provide functional training support as required.
• Provide OCONUS deployment/TDY travel support as required.
• Provide CONUS TDY support as required.

Required Qualifications

• B.S. in related field and 5 or more years' relevant IT experience; Or, 7 or more years' relevant IT experience.
• Firewall and Unix/Linux experience.
• Ability to implement and enforce local network usage policies and procedures.
• Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server using server images.
• Experience with implementation of storage solutions, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments.

Certifications Required

• CompTIA Network+CE or CISCO Certified Network Associate (CCNA)
• ITIL Foundation - Candidate has up to 60 days to acquire ITIL Foundation certification

Clearance Required

• Department of Defense Secret security clearance or the ability to obtain an Interim Secret clearance.

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.