Sr. Network Security Engineer

VulnU; Bethesda (MD); Híbrido; USD 143.000 - 173.000; Tempo integral

Benefícios oferecidos por esta vaga

Retirement match

Paid parental leave

Resumo da vaga

GDIT in Bethesda, MD is seeking a Senior Network Security Engineer to own NAC configuration, deployment, and ongoing management in a 24x7 environment. You will oversee Cisco ISE, IDS/IPS, and related security components, ensuring performance and security standards.

The role requires extensive hands-on experience with NAC technologies, Cisco firewalls, and network security design. Travel is local in the DC metro area, with a hybrid work arrangement at the Bethesda site.

Qualificações

• 10+ years of experience implementing and maintaining Network Access Control technologies (Cisco IDS/IPS, ISE, Forescout, Cisco AnyConnect, etc.)
• Minimum 10 years of experience in a Network Engineering role
• Experience with enterprise datacenter network infrastructure and mid-to-large NAC deployments

Responsabilidades

• Collaborate in the Architecture and Administration of LAN technologies including Cisco Switches and Cisco ASA Firewalls
• Collaborate in the architecture and Administration of Network Access Control systems including Cisco ISE, Forescout, Cisco ACS, RSA, Cisco AnyConnect, Gigamon, IDS/IPS
• Troubleshoot and resolve a wide range of client/user issues and act as an escalation point for LAN/NAC issues
• Work closely with IT teams to ensure cohesive support and strategies across the IT organization
• Develop and maintain high-level designs (HLDs) and low-level designs (LLDs) for security solutions

Conhecimentos

Cisco ASA Firewall

Cisco Firewall Security

Cisco Identity Services Engine (ISE)

Cisco IPS

Cisco NAC

Formação

Bachelor's degree in Computer Science or related field

Ferramentas

Cisco AnyConnect

Forescout

Cisco ACS

RSA

Gigamon

Descrição da vaga

# Sr. Network Security EngineerGDIT · gdit.comCategory: Network SecurityLocation: USA MD BethesdaLevel: SeniorSalary: $142,792 – $172,500Clearance: Public Trust## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* Paid parental leaveType of Requisition:RegularClearance Level Must Currently Possess:NoneClearance Level Must Be Able to Obtain:NonePublic Trust/Other Required:NACI (T1)Job Family:Cyber and IT Risk ManagementJob Qualifications:Skills:Cisco ASA Firewall, Cisco Firewall Security, Cisco Identity Services Engine (ISE), Cisco IPS, Cisco NACCertifications:NoneExperience:10 + years of related experienceUS Citizenship Required:NoJob Description:The Senior Network Security Engineer is responsible for the configuration, deployment, and management of the customer’s NAC solution in a 24x7x365 environment. The senior engineer is accountable for but not limited to monitoring, configuration changes, accounts, and software updates for the customer’s NAC, Cisco ISE and IDS/IPS solutions. The engineer must be able to analyze, troubleshoot, and remediate issues within the enterprise. The engineer will also work closely with other teams to ensure that these solutions are performing to standard.This position is located at 6555 Rock Spring Drive, Bethesda, MD travel is primarily local in the DC metro area.Responsibilities:Collaborate in the Architecture and Administration of LAN technologies of Cisco Switches and Cisco ASA FirewallsCollaborate in the architecture and Administration of Network Access Control systems including but not limited Cisco ISE, Forescout, Cisco ACS, RSA, Cisco AnyConnect, Gigamon, IDS/IPS.Troubleshoot and problem solve a wide variety of client/user issues and act as an escalation point for LAN/NAC related issuesWork closely with other IT functional teams to ensure cohesive support and strategies across the IT organizationSupport the development of project schedules and execute as authorized Maintain relationships with key Third-Party software/hardware vendors to provide support to the infrastructure as needed.Provide daily support for tickets: service requests, incidents, problems, and tasksExecute tasks to support projectsProvide regular updates to ticketsProduce daily/weekly status reportsDevelop and execute change request plansIdentify appropriate security access control solutions to satisfy customer business objectives/requirementsDevelop High-Level Designs (HLDs) and Low-Level Designs (LLDs)Document physical and logical topologies for security solutionsDevelop High-Level task lists/Work Breakdown Structure (WBS)Determine the Level of Effort (LOE) for service/solutionsDevelop Bills of Materials (BOMs) and participate in the decision-making process for the acquisition of current/new technologies for the customer environmentDocument solution risks, issues and mitigation strategiesCreate and maintain network diagramsProvide Subject Matter Expertise for network security technologiesMeet with management and the customer to present and discuss design and implementation effortsRequired Skills:BS degree in Computer Science, Information Systems or equivalent.Must have a minimum of 10 years of experience implementing and maintaining Network Access Control technologies (Cisco IDS/IPS, ISE, Forescout, Cisco AnyConnect, etc.)Must have minimum 10 years of experience in a Network Engineering role.Experience with network infrastructure in enterprise datacenter solutions.Experience with mid to large scale implementations of Network Access Control technologies.Ability to obtain/maintain a Public trust which requires background check, fingerprints, etc. Desired Skills:Cisco CCNA/CCNA/Security, CCNP/CCNP Security, CCIE certificationsCisco SISE certificationForescout FSCA/FSAA/FSCE certificationsExperience with Cisco wireless LAN controllers.Experience with Forescout security products.Experience configuring Cisco ASAs and switches.Experience configuring 802.1X.Experience configuring and implementing network segmentation including VLANs and MPLS.Experience with multiple end-system operating systems including Windows, Linux, Mac OS, and Apple IOS.Experience with ServiceNow and Visio is an assetThe likely salary range for this position is $142,792 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Scheduled Weekly Hours:40Travel Required:NoneTelecommuting Options:HybridWork Location:USA MD BethesdaAdditional Work Locations:Total Rewards at GDIT:Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process:As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work:We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.Join our Talent Community to stay up to date on our career opportunities and events atgdit.com/tc.Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans