Network/Boundary Protection Engineer

Jacobs Engineering Group Inc.; Las Cruces, Northern (NM, KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) plan

Paid time off

Profit-Sharing Plan

Stock purchase plan

Deferred compensation options

Executive Deferral Plan

Merit increases

Bonus opportunities

Job summary

Jacobs is seeking a highly experienced boundary-protection engineer to maintain secure enterprise perimeters and manage firewall performance across the network. This role focuses on fault-tolerant data infrastructure, incident response, and policy-driven security updates.

Required are TS/SCI CI clearance and hands-on expertise with Palo Alto, Cisco ASA and Forcepoint devices, along with Bluecoat proxies. Expect on-site work and strong collaboration with IT teams.

Qualifications

• 16 years of combined education and experience required.
• 7 years of boundary protection experience delivering fault-tolerant data network infrastructure.
• DoD 8140 IAT Level 2 certification required.
• Experience with Palo Alto, Cisco ASA and Forcepoint appliances.
• Experience with Bluecoat proxies or equivalent applications.
• Knowledge of routing, switching, NAT, IP subnets and security technologies.
• Ability to read schematics and manuals and implement changes.
• Experience with ServiceNow or similar ITSM tools.
• Strong verbal and written communication; MS Office skills.
• Ability to work rotating shifts and after-hours on-call.

Responsibilities

• Maintain security and networking of enterprise boundary enclaves and devices
• Install software, apply patches, manage file systems, monitor firewall performance
• Provide support for Palo Alto, Cisco ASA, and Forcepoint firewall equipment
• Generate and implement custom proxy policies and exemptions
• Serve as Proxy SME for integration of other technologies
• Troubleshoot web connectivity to determine root cause
• Perform proxy solution upgrades, testing and configuration
• Develop evidence collection, protection, and analysis techniques
• Provide real-time monitoring and alerting of security incidents
• Provide day-to-day O&M support for incident management and outages
• Collaborate with IT staff on projects
• Contribute to monthly SLA progress and status reporting
• Work with support teams to resolve network traffic concerns
• Use monitoring tools and log collectors for traffic analysis

Skills

Boundary protection

Incident response

Palo Alto

Cisco ASA

Forcepoint

Proxy technologies

Routing fundamentals

ITSM basics

MS Office

Tools

Bluecoat proxies

ServiceNow

Job description

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

Your impact

Knack Works, a Jacobs Company,

The job duties are as follows:

• Maintain the security and networking of enterprise boundary enclaves and devices
• Responsible for installing software, applying patches, managing file systems, and monitoring performance of firewall systems
• Provide support for Palo Alto, Cisco Adaptive Security Appliance (ASA), and Forcepoint firewall equipment and applications
• Generate, determine impact of, and implement custom proxy policies and/or policy exceptions in response to ongoing technology implementation activities on the program
• Proxy Subject Matter Expert (SME) for integration of other technologies within the program (function as an SME on ongoing technology projects)
• Support the troubleshooting of web connectivity problems to determine root cause
• Perform Proxy solution component upgrades, testing and configuration
• Research and develop evidence collection, protection, and analysis techniques for customer owned and maintained hardware and/or software
• Provide real-time monitoring and alerting of security incident investigations on perimeter/internal infrastructure
• Provide day-to-day Operations and Maintenance (O&M) support for all incident management events and outages
• Collaborate with IT staff on projects and initiatives
• Provide input for monthly progress and status reporting of Service Level Agreements (SLAs)
• Work with all corresponding technical support teams as required to resolve network traffic concerns
• Utilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues

Here's what you'll need

Required Clearance: TS/SCI CI

Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years. Additional required qualifications include:

• Candidate must have 7 years of relevant boundary protection experience delivering fault tolerant data network infrastructure solutions and incident response
• Must comply with DoD 8140 Information Assurance Technical (IAT) Level 2.
• Experience in configuring and troubleshooting boundary protection technologies such as Palo Alto, Cisco ASA, and Forcepoint appliances
• Experience with proxy technologies such as Bluecoat proxies or equivalent applications
• Working knowledge or Routing and Networking fundamentals
• Working knowledge of boundary protection best practices
• Understanding of routing, switching, Internet Protocol (IP) subnet, Network Address Translation (NAT) and security technologies
• Demonstrated ability to engineer and modify rulesets to allow connectivity for new customer requirements
• Demonstrated ability to read, understand, and develop schematic diagrams, technical manuals, and documentation such that the supported equipment and software can be maintained with minimal training
• Working knowledge of Service Now or similar IT Service Management (ITSM) products
• Superior verbal and written communication skills
• Intermediate-level knowledge of MS Office products Word, Excel, PowerPoint, and Visio
• Work rotating schedules and after-hours on-call support

Our health and welfare benefits are designed to invest in you, and in the things you care about. Your health. Your well-being. Your security. Your future. Employees have access to medical, dental, vision, and basic life insurance, a 401(k) plan, paid time off, and Profit-Sharing Plan (PSP) which includes both PSP contributions and an optional 401(k) plan (available immediately (i.e., no deferment or wait period), and the ability to purchase company stock at a discount. Eligible employees may also enroll in a deferred compensation plan or the Executive Deferral Plan. And certain roles may be eligible for additional rewards, including merit increases, performance discretionary bonus, and stock.

The base salary range for this position is $150,000.00 to $190,000.00. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Onsite employees are expected to attend a Jacobs Workplace on a full-time basis, as required by the nature of their role.

Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support.