Network Security Engineer

Itezz; Annapolis (MD); On-site; USD 100,000 - 300,000; Full time

Benefits offered by this job

SEP IRA 10% company contribution

Health/Dental/Vision plans

Job summary

Itezz Inc. seeks an experienced Network Security Engineer with a TS/SCI clearance and a strong hardware/system focus.

The role covers design, testing, and deployment across CONUS and outside CONUS, with leadership of security engineering teams and collaboration with system/test engineers. Requirements include a bachelor’s degree (or substitute with 5 years of relevant experience), DoD 8570 IAT III, and three vendor certifications (NGFE, SNSA/SNSP, CCNA/CCNP/CCIE).

Qualifications

• US citizenship and a position-appropriate security clearance (e.g., Active TS/SCI with polygraph) is required.
• Bachelor’s degree in a related discipline; five years of Network Security engineering experience may substitute for a degree.
• DoD approved 8570 Baseline Certification for IAT Level III.
• At least three of the following vendor certifications: Palo Alto NGFE; SNSA/SNSP; CCNA/CCNP/CCIE.

Responsibilities

• Configure network devices, firewalls, web proxies, VPNs, and load balancers.
• Direct the work of other Network Security engineers on projects of varying complexity.
• Plan hardware project phases, including schedules, budgets, and performance parameters.
• Collaborate with system and test engineering to develop hardware test plans and risk analyses.
• Develop proposals to reduce upfront and disposal costs.
• Lead teams to address critical system failures related to hardware components.
• Design system/network architectures across enclaves with differing data protection requirements.
• Provide security planning, risk assessment, and risk management.

Education

Bachelor’s degree in Communications Engineering, Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Mathematics, or related discipline

Job description

Job Description

Provide engineering expertise to analyze complex systems, architecture, network design, and other technical hardware issues. Procure and perform acceptance testing on equipment. Provide hardware maintenance support, both preventative and remedial. Deploy, install, and implement hardware at Continental United States (CONUS) and Outside Continental United States (OCONUS). Prepare specifications for hardware by analyzing documented and derived system requirements. Conduct site surveys. Prepare engineering plans and site Technical Design Packages. Organize and direct hardware installations. Configure (and document configuration of) computers, networking devices and various peripheral equipment. Prepare site installation and test reports. Ensure that problems have been properly identified and solutions will satisfy the user’s requirements. Prepare reports and recommendations concerning existing and emerging hardware technologies. Provide specific input to the hardware components of system design to include end‑user devices, servers, networking devices, data storage devices, and specialized processors.

Required Qualifications

Due to federal contract requirements, United States Citizenship and a position‑appropriate security clearance is required (e.g., Active TS/SCI security clearance with customer‑appropriate polygraph).

• TS/SCI with Agency Appropriate Polygraph
• Fifteen (15) years of experience as a Network Security Engineer analyzing complex hardware systems on programs and contracts of similar size, scope, and complexity
• Bachelor’s degree in Communications Engineering, Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Mathematics, or related discipline from an accredited college or university. Five (5) years of Network Security engineering experience may be substituted for a Bachelor’s degree.
• Must meet DoD approved 8570 Baseline Certification for IAT Level III
• Must possess at least three (3) of the following vendor certifications:
  • Palo Alto Next‑Generation Firewall Engineer (NGFE)
  • SonicWall Network Security Certification (Administrator (SNSA) or Professional (SNSP))
  • Cisco Enterprise Certification (CCNA, CCNP, or CCIE)

Capabilities

• Configure network devices, firewalls, web proxies, VPNs, and load balancers
• Direct the work of other Network Security engineers on a project requiring a variety of Network Security engineering activities and tasks
• Plan all phases of hardware projects to include schedules, budgets, and maturation of technical performance parameters
• Work closely with system engineering and test engineering to develop and validate hardware portion of test plans, test procedures, throughput models, failure analysis, and risk analysis
• Develop proposals for the program manager to reduce or avoid customer costs in up‑front acquisition costs or operational/disposal costs
• Organize and direct teams to address critical system failures that potentially derive from hardware component failure or misconfiguration
• Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements
• Recommend system‑level solutions to resolve security requirements
• Provide security planning, assessment, risk analysis, and risk management
• Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures

Additional Experience

• Computer Network Operations
  • NSE‑3/Architecture Lead Network – Ten (10) years of experience completing component testing on switches, VPN concentrators, or routers. Led a minimum of 2 evaluations on switches, routers, or VPN devices.
• Information Assurance
  • NSE‑3/Architecture Lead Firewall/Proxy – Ten (10) years of experience completing component testing on firewalls and/or web proxies. Led a minimum of 2 evaluations on firewall and/or web proxy devices.
• Information Technology
  • NSE‑3/Technical Lead – Ten (10) years of experience directing up to 30 engineers scoping a minimum of 5 IT security systems. Two (2) years of experience with IAVA scanning and patching requirements.
• Other
  • NSE‑3/Deployment Lead – Served as a deployment lead for network boundary systems for a minimum of 5 large deployments (5 or more racks) and 5 small deployments (4 or less racks). Prepared a minimum of 10 site Technical Design packages (implementation packages) that include architecture diagrams, rack elevation diagrams, inventory information, cabling information, and IP addressing tracking. Worked a minimum of 5 deployments through a defined acquisition logistics management process.

Salary Range

$100,000.00 – $300,000.00 (Annually)

Benefits Package

Itezz Inc. automatically contributes an additional 10% of each employee’s gross compensation to the company SEP IRA plan, with no requirement for employee matching. All contributions are fully vested from day one.

Full‑time employees have the option to participate in a variety of voluntary benefit plans:

• Choice of CareFirst BlueChoice Medical Plans, some with Health Savings Account (HSA)
• CareFirst Preferred Dental
• CareFirst BlueVision

Equal Opportunity Employer

Itezz Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Affirmative Action Statement

Itezz Inc. is committed to the principles of affirmative action in all hiring and employment for minorities, women, individuals with disabilities, and protected veterans.