Senior Security Integration Engineer

KIHOMAC; Colorado Springs (CO); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Life Insurance

Paid Time Off

Disability Insurance

Training & Development

Wellness Resources

Job summary

KIHOMAC in Colorado Springs seeks a senior network security engineer to guide leadership on network architecture including Cisco routers, switches, firewalls, and VPNs. You will advise end-users, lead incident response, and coordinate with project managers, network engineers, and architects to ensure secure, scalable infrastructure.

Responsibilities include mentoring engineers, maintaining documentation, performing hardening/STS checks, and collaborating on design, deployment, testing, and

Qualifications

• Bachelor's degree preferred
• Active CCNA, CySA+, GSEC, or Security+ certification required
• Elastic Certified Engineer or Elastic certifications preferred

Responsibilities

• Provide advice and training to end-users and inform senior leadership
• Coordinate routine maintenance, break/fix, and planned changes with team leads and project managers
• Update network documentation and perform hardening and STIG checks on network and VM assets
• Mentor junior/mid engineers and review work during development
• Support and coordinate with network architects, SMEs and system engineers on design and deployment

Skills

Cisco routing

Network security tools

Linux

Education

Bachelor's degree in relevant field

Tools

Visio

Lucidchart

VMware NSX

SolarWinds

Riverbed

Job description

Job Description

Provide advice and training to end-users, and guide and inform senior leadership Demonstrate a firm understanding of network architectures including Cisco routers, switches, firewalls, IPS, and internal and external routing to delegate tasks to network engineering team Work directly with corresponding Team Leads, Project Managers, Network Engineers, and Network Architect for coordination of routine maintenance, break/fix repair, and planned changes, coordinating any down time with all appropriate leadership and stakeholders Perform end-user support to internal teammates and tenants/performers alike, including but not limited to Layer 1-3 troubleshooting, physical fault isolation cabling, etc. Generate network design guidance in coordination with architects, SMEs, and system engineers; along with the installation/deployment, configuration, testing, compliance enforcement, and reporting on MDSEA assets to include Cisco, Gigamon, and Riverbed hardware, along with the associated software suites and those of VMware NSX/ vCenter, SolarWinds, and other tools as necessary as well as assure and sustain the integrity and security of network infrastructure Update documentation (network diagrams, rack diagrams, etc.) utilizing approved work vehicles and the change management process Perform hardening and STIG checklist validation/verification for associated network infrastructure and virtual machines Provide mentorship and training to junior/mid engineers to ensure their participation in experience-gathering day-to-day activities, and review work products and efforts during their development Other duties as assigned

Requirements

• Education/Training:Bachelor's degree in relevant engineering or science discipline preferred
• Active CCNA, CySA+, GSEC, or Security+ certification required
• Elastic Certified Engineer, Elastic Certified Analyst, or relevant Elastic certifications preferred

Experience

• 10+ years of general (full-time) work experience required
• 5+ years of directly related experience required
• 2+ years of experience in a management or leadership role required
• Must have a strong understanding of enterprise networks, including routing, switching, VPNs, firewalls, and network security tools
• Experience with data ingestion, processing, and enrichment techniques required
• Ability to build and maintain network and data flow diagrams (e.g., Visio, Lucidchart, Draw.io)
• Proficiency in Linux systems, command-line tools, and system administration fundamentals required
• Experience working directly with customers in a technical consulting or engineering capacity required
• Experience with cloud platforms and logging pipelines (AWS, Azure, GCP, cloud-native telemetry) preferred
• Familiarity with ECS (Elastic Common Schema) and data normalization best practices preferred
• Experience implementing detection engineering or threat hunting workflows in Elastic Security preferred
• Knowledge of scripting languages (Python, PowerShell, Bash) to automate ingestion and data validation preferredExperience integrating EDR, NDR, IAM, and vulnerability management logs into a SIEM preferred
• Understanding of MITRE ATT&CK, cyber kill chain, and threat intelligence ingestion preferred
• Experience mentoring or leading small technical teams preferred

Security

• Must be a US citizen
• Candidate must be in possession of a minimum DoD issued Secret Clearance

Physical Requirements

• Able to occasionally reach with hands and arms
• Prolonged periods of computer screen use, while sitting or standing at a desk
• Adhere to safety protocols when in work areas requiring use of PPE (e.g. eyewear, gloves, masks, hearing protection, steel toed shoes, etc.)
• Able to safely lift and carry up to 20 pounds at a time

Benefits

• Health Care Plan (Medical, Dental & Vision)
• R tirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability
• Training & Development
• Wellness Resources

Salary

$130,000 - 150,000

Salary rates for this position are competitive and commensurate with experience and industry standards. We offer a comprehensive benefits package that may include health insurance, paid time off, and retirement savings options.