Senior Network Security Engineer (Firewall/IPS) - Active Top Secret Required - DOJ NSD

ITC Federal; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Dental and Vision

401(k)

Flexible Spending Account (FSA)

11 Paid Federal Holidays

PTO

Education reimbursement

Job summary

ITC Federal is seeking a Senior Network Security Engineer to support the DOJ NSD with a focus on firewall and IPS management. Candidates must possess a minimum of 10 years of IT experience and an active Top Secret security clearance.

The role involves planning, coordinating, and implementing security measures, as well as managing firewalls and related documentation. Benefits include health coverage and 401(k) options.

Qualifications

• 10+ years of IT experience required.
• Bachelor’s Degree is strongly preferred.
• Active Top Secret security clearance required.

Responsibilities

• Plan and implement information security measures.
• Analyze solutions for technical feasibility.
• Monitor and maintain firewalls/IPS health.
• Develop and maintain network security documentation.

Skills

IT experience

Firewall design and optimization

Network security technologies

Documentation of procedures

Expert knowledge of security tools

Education

Bachelor’s Degree

Tools

Cisco Identity Services Engine (ISE)

Cisco Firepower

DMVPN

Juniper ADVPN

Job description

Overview

Job Title: Senior Network Security Engineer (Firewall/IPS) – Top Secret Required

Government Agency: DOJ NSD – National Security Division

Position Information: Full-Time Position; Government contractor supporting DOJ NSD

Location: Washington, DC

Position Timing: ASAP; hiring immediately

Benefits

• Health, Dental and Vision
• 401(k)
• Flexible Spending Account (FSA)
• 11 Paid Federal Holidays
• PTO
• Education reimbursement

Responsibilities

• Plans, coordinates, and implements the organization’s information security.
• Analyzes requirements and potential solutions for technical and economic feasibility.
• Design optimized firewall and IPS rule structure and ensures standards are maintained.
• Monitors and maintains health of all firewalls/IPS and recommends improvements.
• Develops and maintains documentation of firewall/IPS procedures.
• Develops and maintains complex schematics relating to network security.
• Researches, evaluates, recommends, designs, tests, and implements new network security technologies.
• Displays expert knowledge of current security tools and practices.
• Under general guidance, provides support to network engineers.

Qualifications

• 10+ years of IT experience, required
• Bachelor’s Degree, strongly preferred

Mandatory Hands‑on Experience With The Following Technologies

• Cisco Identity Services Engine (ISE) – upgrade, licensing, maintenance, and deployment
• Cisco Firepower – upgrade, maintenance, and deployment
• Cisco migration from ASA to Firepower Threat Defense (FTD) mode
• Cisco 802.1X – ongoing deployment
• DMVPN design and deployment, compliant with CNSSP-15
• Juniper ADVPN

Good Working Understanding Of The Following Routing Protocols

• OSPF
• EIGRP
• BGP

Certifications

• CCNP Security – Strongly preferred
• CCNP Enterprise (Routing & Switching) – Strongly preferred
• CCDP – preferred

Security Clearance Requirements

• Active Top Secret, required.

Working Environment

• Prolonged periods of sitting at a desk and working on a computer.
• Standard office environment; ability to lift 25 pounds.

ITC Federal, LLC is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.