Networking Security Engineer (R-00236)

The Network Security Engineer Senior leads complex network security architecture, engineering, tool sustainment, and analysis for CBP. The engineer provides senior review of network and firewall designs, directs resolution of security and performance issues, and develops technology recommendations for Government leadership.

Job Responsibilities

• Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance.
• Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation.
• Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities.
• Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues.
• Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations.
• Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports.

Job Qualifications

• Minimum 7 years of relevant network security, network engineering, cybersecurity engineering, or security-tool administration experience.
• Advanced experience with LAN and WAN security, cloud networking, firewall architecture, IDS and IPS, SIEM integrations, CDM tools, network sensors, and security investigations.
• PWS minimum certifications: CompTIA Security+ and Network+; Cisco CCST Networking or Cybersecurity or CCENT; Palo Alto PCCSA; Juniper JNCIA-Junos; and AWS Cloud Practitioner. Active higher-level certifications may support a waiver.
• Preferred certifications include Cisco CCNA or CCNP and AWS Advanced Networking Specialty.
• Demonstrated ability to lead architecture reviews, alternatives analyses, trade studies, root-cause investigations, technology insertion recommendations, policy development, and technical reporting.