Senior Network Firewall Lead — Ts/Sci With Poly

Caci International Inc; Town of Texas (WI); On-site; USD 90,000 - 130,000; Full time

Job summary

MANTECH is seeking a motivated Network Security Engineer to join our team in Chantilly, VA. This onsite role focuses on Tier II/III security engineering, WAN/LAN/data center design, and cross-team coordination to drive infrastructure initiatives.

The candidate will monitor networks with SolarWinds, Cisco Firepower FMC, and Cisco ISE, create security diagrams, and participate in ITIL processes. A TS/SCI clearance is required; DoD 8570.1/IAT III certification within 6 months is expected.

Qualifications

• 7+ years of progressively responsible experience in Network Security Engineering or related field.
• Current TS/SCI clearance is required.
• DoD 8570.1 / DoD IAT III certification within 6 months of hire.

Responsibilities

• Perform Tier II and Tier III network security engineering support, while assisting in designing advanced WAN, LAN, and data center solutions.
• Monitor and configure networks using SolarWinds, Cisco Firepower FMC, and Cisco ISE to analyze complex network requirements and ensure functioning infrastructure.
• Create, maintain, and interpret detailed network security diagrams and routing topology schemas.
• Coordinate across large internal teams and Sponsor authorities to drive infrastructure agendas.
• Participate in ITIL Service Lifecycle, including Change Requests and security event monitoring policies.
• Evaluate current network security architectures and recommend improvements to optimize performance.
• Deliver end-to-end analysis, requirements, cost estimation, and engineering package releases for customer environments.

Skills

Routing protocols (BGP/OSPF)

VLANs & VRFs

ITIL/Change management

Network security engineering

Documentation & diagramming

Education

CCNA or JNCIA-Junos certification

DoD 8570.1 / DoD IAT III certification

Bachelors degree in an engineering discipline

Tools

SolarWinds

Cisco Firepower FMC

Cisco ISE

VMware

Windows Systems

HP SANs

Ansible

DSC

Job description

MANTECH Network Security Engineer

MANTECH seeks a motivated, career and customer-oriented Network Security Engineer to join our team in Chantilly, VA. This is an onsite position.

• Perform Tier II and Tier III network security engineering support, while assisting in designing advanced WAN, LAN, and data center solutions.


• Monitor and configure networks utilizing SolarWinds, Cisco Firepower FMC, and Cisco ISE to analyze complex network requirements and ensure complete, functioning infrastructure


• Create, maintain, and interpret highly detailed technical network security diagrams, routing topology schemas, and robust hardware configuration baselines


• Coordinate across large internal teams, stakeholders, and Sponsor authorities to drive infrastructure agendas and successfully navigate systems engineering processes


• Participate in all phases of the ITIL Service Lifecycle, including submitting Change Requests and maintaining security event monitoring policies


• Evaluate current network security architectures, inventory complex routing pathways, and recommend process improvements to optimize performance and throughput


• Deliver end-to-end functional analysis, requirements specification, cost estimation, and engineering package releases for customer production IT environments

• High School Diploma or GED with 7+ years of progressively responsible experience in Network Security Engineering, Network Analysis, or a related technical discipline


• Cisco Certified Network Associate (CCNA) certification, or equivalent routing/switching technical certification, ex., Juniper Networks Certified Associate - Junos (JNCIA-Junos)


• DoD 8570.1 / DoD (IAT III Level) certification required within 6 months of hire, e.g., SecurityX

• Bachelors degree in an engineering discipline


• Experience using and administering SolarWinds alongside deep knowledge of Microsoft Windows Systems, HP SANs, and VMware products


• Advanced experience managing VPNs, GRE tunnels, routing protocols (BGP E/I, OSPF), VLANs, VRFs, and configuring KGs


• Strong familiarity with Cisco ACI, data center fabric best practices, Ansible, and Desired State Configuration (DSC)


• Strong familiarity with Cisco Secure Firewall ( Firepower FMC)


• Practical knowledge of BICSI standards, terminating fiber and Cat 5 cabling, as well as familiarity with NSTISSAM TEMPEST/2-95 and CNSSAM TEMPEST/01-13 guidelines

Must have a current and active TS/SCI clearance

The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.