Senior Network Security Engineer

We are seeking a Senior Network Security Engineer to join our team. As a Senior Network Security Engineer, you will be responsible for the configuration, deployment, and management of the customer's NAC solution in a 24x7x365 environment. You will monitor, make configuration changes, manage accounts, and perform software updates for the customer's NAC, Cisco ISE, and IDS/IPS solutions. You will analyze, troubleshoot, and remediate issues within the enterprise and work closely with other teams to ensure that these solutions are performing to standard.

Responsibilities:

• Collaborate in the architecture and administration of LAN technologies, including Cisco Switches and Cisco ASA Firewalls
• Collaborate in the architecture and administration of Network Access Control systems, including Cisco ISE, Forescout, Cisco ACS, RSA, Cisco AnyConnect, Gigamon, IDS/IPS
• Troubleshoot and problem-solve client/user issues and act as an escalation point for LAN/NAC-related issues
• Work closely with other IT functional teams to ensure cohesive support and strategies across the IT organization
• Support the development of project schedules and execute as authorized
• Maintain relationships with key third-party software/hardware vendors to provide support to the infrastructure as needed
• Provide daily support for tickets, including service requests, incidents, problems, and tasks
• Execute tasks to support projects
• Provide regular updates to tickets
• Produce daily/weekly status reports
• Develop and execute change request plans
• Identify appropriate security access control solutions to satisfy customer business objectives/requirements
• Develop High-Level Designs (HLDs) and Low-Level Designs (LLDs)
• Document physical and logical topologies for security solutions
• Develop High-Level task lists/Work Breakdown Structure (WBS)
• Determine the Level of Effort (LOE) for services/solutions
• Develop Bills of Materials (BOMs) and participate in the decision-making process for the acquisition of current/new technologies for the customer environment
• Document solution risks, issues, and mitigation strategies
• Create and maintain network diagrams
• Provide subject matter expertise for network security technologies
• Meet with management and the customer to present and discuss design and implementation efforts

Requirements:

• BS degree in Computer Science, Information Systems, or equivalent
• Minimum of 10 years of experience implementing and maintaining Network Access Control technologies (Cisco IDS/IPS, ISE, Forescout, Cisco AnyConnect, etc.)
• Minimum of 10 years of experience in a Network Engineering role
• Experience with network infrastructure in enterprise datacenter solutions
• Experience with mid-to-large-scale implementations of Network Access Control technologies
• Ability to obtain/maintain a Public trust which requires background check, fingerprints, etc.

Desired Skills:

• Cisco CCNA/CCNA/Security, CCNP/CCNP Security, CCIE certifications
• Cisco SISE certification
• Forescout FSCA/FSAA/FSCE certifications
• Experience with Cisco wireless LAN controllers
• Experience with Forescout security products
• Experience configuring Cisco ASAs and switches
• Experience configuring 802.1X
• Experience configuring and implementing network segmentation, including VLANs and MPLS
• Experience with multiple end-system operating systems, including Windows, Linux, Mac OS, and Apple IOS
• Experience with ServiceNow and Visio is an asset

Benefits: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre- and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short- and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.